Great article. The embedded security roles in other parts of the org is key. Can you elaborate in some of the specifics you're measuring for metrics from an IR perspective? Have been struggling with that.