Security performance is measured using defined metrics
Defining a small set of security indicators, what each measures and what triggers action, gives independent reviewers something concrete to check against.
This policy control defines a small set of security indicators, who produces them and what triggers action, the measurement basis A.5.36's compliance monitoring relies on.