Although security professionals may think that they are developing an effective SA program plan, security professionals need to provide metrics to show senior management and other stakeholders how effective the SA programs are