This article is based on a conference talk by Aram Hovsepyan at OWASP Global Appsec Barcelona 2025.

Voices are AI generated. For full factual accuracy please refer to the underlying article:

https://codific.com/security-metrics-with-purpose-and-strategic-impact/

There is also a free course on metrics by Aram Hovsepyan available on Thinkific.

https://owaspsamm.thinkific.com/courses/metrics