One of the effective ways that a chief information security officers CISO and external auditors assess and given vulnerability management process is by reviewing key metrics. The article listed several basic and advance metrics assume that you are head of CISO, which metric would you want to use