An Attempt to Improve Information Security Practices by Comparing Anorganization's

Multiple Choice

An attempt to improve information security practices by comparing anorganization's efforts against practices of a similar organization or an industry-developedstandard to produce results it would like to duplicate.

A) accreditation
B) baseline
C) benchmarking
D) certification
E) due diligence
F) best security practices
G) recommended business practices
H) standard of due care
I) performance measurements
J) NIST SP 800-37