Which of the Following Would NOT Be a Valuable Performance

Multiple Choice

Which of the following would NOT be a valuable performance measure?

A) Percent of the organization's IT budget devoted to InfoSec
B) Percent of IT personnel that have received security training
C) Percent of media that has been sanitized
D) Percent of vulnerabilities that have been remediated with organizationally specified time frames