Just a few years ago, the only security metric that mattered was whether your organization had been hacked or not. This all-or-nothing definition of security success is now outdated. There are new, more complex metrics that measure the strength of your security posture.