Every security domain has a number that tells you how much of it is under control. Identity has MFA adoption. Patching has mean time to remediate. Exposure has open critical issues. Each one answers a simple question at a glance. Cloud infrastructure should have an equivalent metric, and Infrastructure-as-Code (IaC) coverage is a strong candidate. IaC is how the modern cloud gets built, and for go...