The Cloud Security Alliance has announced the formation of a Metrics Working Group.  Founded by Lynn Terwoerds of SafeMashUps, Caroline Wong of eBay, Tara Darbyshire of EMC/Archer, and Betsy Nichols of PlexLogic, the group will be defining concrete metrics that are designed to enhance and support current CSA guidance as provided here.  The working group will publish its metrics in an open format which allows for comment, revision history, and eventually consumption by the entire CSA (and potentially other) community.  The first three CSA Domains to be addressed are:  Encryption and Key Management, Governance and Enterprise Risk Management, and Application Security.