As soon as I read the title of this article, I knew I would agree and I do. Consistent, comparable metrics are a tremendous motivator. They can help raise baseline expectations and start productive conversations about creative solutions to difficult problems. I hope our industry, the world of IT security / compliance / risk management, can move in this direction sooner rather than later.