Spire Security Viewpoint: Top Ten Strategic Security Metrics: "# Transaction Value (TV) - (Total Value of IT and Information Assets $ / Total Transactions)
# Transaction Cost (TC) - (Total Cost of IT and Information Assets $ / Total Transactions)
# Controls per Transaction (CPT) - (Total Number of Inline Control Events / Total Transactions)
# Cost per Control (CPC) - (Total Cost of Control $ / Total Number of Inline Control Events)
# Security to Value Ratio (STV) - (Total Security Costs $ / Total Value of IT and Information Assets $)
# Loss to Value Ratio (LTV) - (Total Losses $ / Total Value of IT and Information Assets $)
# Control Effectiveness Ratio (CE) - ((Good Allowed Control Events + Bad Denied Control Events) / Total Number of Inline Control Events)
# Incidents per Million (IPM); Incidents per Billion (IPB) - ((Total Number of Incidents / Total Transactions) x One Million or Billion)
# Incident Prevention Rate (IPR) - (1 – (Total Incidents / (True Positives + Total Incidents)))
# Risk Aversion Ratio (RAR) - (False Positives / Total Incidents)"