Security Metrics: Getting Aggregation Right

Lately I&rsquo;ve been working a good bit on security metrics, and I wanted to publish a short post on some learnings I&rsquo;ve had along the way. First off, security metrics may not be super exciting to work on, but I do see them as important work. They make it possible for leadership and product teams alike to understand security postures without having to go and directly talk to a subject…