CIS Controls V7 Measures & Metrics
NIST: SP 800-55: Performance Measurement Guide for Information Security
InfoSec Metrics