“Your dashboard should reveal the truth of what's going on in terms, in terms of your process perhaps, rather than your output and these scanners that look into your code, because that's one side of the story. And a typical AppSec program is about people, processes, and tools.”

Transcript evidence from Aram Hovsepyan -- Your Security Dashboard is Lying to You: The Science of Metrics.