McNamara fallacy

The McNamara fallacy is deciding that what cannot be measured does not matter.

Security is full of things that resist measurement: culture, whether people would report a mistake, whether an engineer felt able to push back. Because they cannot be counted they fall out of reporting, and then out of attention, and then out of funding, while the countable things dominate regardless of importance.