What I have learned
A metric should trigger a different decision when it moves. If no one would change funding, staffing or a control because of the number, it is probably a dashboard ornament.
What I would do
I would report recovery test results, coverage of critical assets, time to make incident decisions and unresolved high-consequence risks. I would show trend, uncertainty and the action each measure invites.