The Metrics ManifestoSecurity professionals are trained sceptics. They poke and prod at other peoples digital creations, expecting them to fail in unexpected ways. Shouldnt that same sceptical power be turned inward? Shouldnt practitioners ask: How do I know that my enterprise security capabilities work? Are they scaling, accelerating, or slowing as the business exposes more value to more people and through more channels at higher velocities? This is the start of the