How can organizational management measure the success of their network security? Please provide an example

Note: minimum 300 words not including title and reference page. References should be taken from peer revived.