George Campbell, emeritus faculty member for the Security Executive Council and the former CSO of Fidelity Investments, discusses how organizations should be evaluating their performance from a security perspective and why it is important to move from simply counting security department activities to creating value metrics.