KPIs for measuring policy effectiveness

Beyond simple compliance rates, what KPIs and metrics do you use to measure whether your policies are actually effective? Looking for both quantitative and qualitative measures.