A.assess progress of risk mitigation efforts.

B.ensure established security metrics are reported.

C.evaluate results of the most recent incident response test

D.review the number of reported security Incidents,

A.meet standards of relevance

B.have integrity and accountability

C.be identifiable and reproducible

D.be stored in the original media.

A.Increased number of weaknesses from vulnerability scans

B.Reduced number of pings on firewalls

C.Increased help desk calls for password resets

D.Increased reports of slow system performance

A.website transactions and taxation.

B.software patches and corporate data

C.lack of competition and free trade

D.encryption tools and personal data

A.An overview of competitors' information security strategies

B.The potential impact of current threats

C.A statement of generally accepted good practices

D.An assessment of current technological exposures