I've managed another blog post on the Tripwire blog: https://www.tripwire.com/state-of-security/building-team-security-arms-race

Measuring hardening through CIS compliance policies is another great way to ensure you’re ahead of the curve on your security program. For compliance improvements, I like to measure both Stability in Compliance and Improvements to Compliance.