Multiple Choice
Which of the following is NOT one of the three types of performance measures used by organizations?
A) Those that determine the effectiveness of the execution of information security policy
B) Those that determine the effectiveness and/or efficiency of the delivery of information security services
C) Those that assess the impact of budgetary shortfalls in information security on the organization or its mission
D) All of these are types of performance measures used by organizations
Correct Answer:

Verified
Correct Answer:
Verified
Q87: "Good security now is better than perfect
Q88: Which of the following would NOT be
Q89: Which of the following is NOT a
Q90: One of the critical tasks in the
Q91: Because "organizations _ what they measure," it
Q93: When choosing from among recommended practices,an organization
Q94: Another problem with benchmarking is that no
Q95: In security management,_ is the authorization of
Q96: Once developed,information security performance measures must be
Q97: Industries that are regulated by <u>governmental agencies</u>