Question: An information security manager uses security metrics to measure the:
A.) performance of the information security program.
B.) performance of the security baseline.
C.) effectiveness of the security risk analysis.
D.) effectiveness of the incident response team.

Download pdf (with explanations) edition of this exam.