Security should prioritize key metrics that monitor the performance and effectiveness of DevSecOps practices. By measuring metrics such as application change time, application deployment frequency, availability, change failure rate, change volume, issue resolution time, issue volume, mean time to recovery (MTTR), time to patch, and time to value, security teams can assess the efficiency, reliability, and value generation of the DevSecOps process.