"This session will discuss the value of risk and compliance frameworks and best practices in a security program. I'll also discuss the role and benefits of security metrics, including visibility, education, and driving change. We'll cover practical advice for incorporating security metrics into a risk and compliance program."