Computer security is one of the most complicated and challenging fields in technology today. A security metrics program provides a major benefit: looking at the metrics on a regular basis offers early clues to changes in attack patterns or environmental factors that may require changes in security strategy. The term "security metrics" loosely translates to the standard measurement of computer security. In this article, the author discusses seven security issues and looks at metrics that can enhance the security program. The security issues are: (1) Policy and compliance; (2) Network and machine monitoring; (3) Outreach and education; (4) Legal compliance: Digital Millennium Copyright Act (DMCA), Personal Credit Information/Industry (PCI), Family Educational Rights and Privacy Act (FERPA), etc.; (5) ID: authorization and authentication; (6) Asset protection; and (7) Privacy. (Contains 1 figure.)