The mean time to patch, number of virus outbreaks prevented, and number of vulnerabilities mitigated are examples of what type of performance metrics?

An organization has defined a set of standard security controls. This organization has also defined the circumstances and conditions in which they must be applied. What is the NEXT logical step in applying the controls in the organization?

Credit card information, medical data, and government records are all examples of:

You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don't know what to do.
What is the BEST approach to handle this situation?

Creating a secondary authentication process for network access would be an example of?