The PRIMARY purpose of implementing information security governance metrics is to:
measure alignment with best practices.
assess operational and program metrics.
guide security towards the desired state.
refine control operations.
Submit