How to Measure Success

watch the following video:
Creating a Security Metrics Program: How to Measure Success - SANS ICS Security Summit 2019
https://www.youtube.com/watch?v=gIsLP_Dtv7M
1) What are the essential ingredients for a ICS Security Program?
2) What do you think should have the most attention and funding? Why?