When collecting security metrics, the IT team is typically interested in knowing how many vulnerabilities were found, patched or remediated. But business leaders need different information; executives want to know about improvements, trends, and percentage changes.