I just finished a new primer on Information Security Metrics.
Have a look if that interests you, and comments are always welcome.
[ A Security Metrics Primer ]
...