When designing metrics for information security, the MOST important consideration is that the metrics:
conform to industry standards.
apply to all business units.
provide actionable data.
are easy to understand.
Submit