A.Requiring information security metrics to be approved by senior management

B.Using a dashboard to present the information security metrics

C.Correlating information security metrics to industry best practices

D.Aligning information security metrics with business drivers

A.a vulnerability assessment.

B.an impact assessment.

C.an asset classification.

D.a threat assessment.

A.Updates based on the organization's security framework

B.Notification to management of the procedural changes

C.Review and approval of procedures by management

D.Updates based on changes in risk, technology, and process

A.Determining the classification of stored data

B.Notifying the relevant stakeholders

C.Maintaining chain of custody

D.Identifying the relevant strain of malware

A.User access log files

B.Administrator user profiles

C.Administrator log files

D.System logging options