Work on Security Metrics over at http://www.securitymetrics.org and an attempt to build a catalogue at http://www.metricscenter.org/

Metrics are a really key part of the security world that has yet to reach the right level of maturity and it's great to see effort and progress to create a standard set of materials that can be reused