A CySA+ analyst is preparing the quarterly vulnerability management report for the CISO. Over the past three quarters, the number of critical vulnerabilities has stayed roughly the same, but the analyst wants to demonstrate whether the security team's remediation process is actually improving or degrading. Which metric presentation would BEST convey the effectiveness of the remediation program over time?