Successful IG program

Q1: Chapter 3 starts with the identification and the introduction of the Principles, and the characteristics of a successful IG program.  Identify these Principles, and provide a brief explanation of their importance?

Q2: In order to have a successful IG program, one of the eight (8) Information Risk Planning and Management step is to develop metrics and measure results. Why are metrics required?  Briefly provide your explanation.