Unless the Security Metrics thing is not just for fun but for PCI compliance and without it passing the business cannot process credit cards. Then this becomes very important. Igor