How can organizational management measure the success of their network security?

/in /by

How can organizational management measure the success of their network security? Please provide an example and references.