Which of the following is NOT one of the three types of performance measures used by organizations?
A) Those that determine the effectiveness of the execution of information security policy
B) Those that determine the effectiveness and/or efficiency of the delivery of information security services
C) Those that assess the impact of budgetary shortfalls in information security on the organization or its mission
D) All of these are types of performance measures used by organizations

Question

Quizplus · Accepted Answer

The types of performance measures used by organizations are those that determine the effectiveness of the execution of information security policy, those that determine the effectiveness and/or efficiency of the delivery of information security services, and those that assess the impact of information security activities on the organization or its mission. Option C, which assesses the impact of budgetary shortfalls in information security on the organization or its mission, is not one of the three types of performance measures used by organizations.

Which of the Following Is NOT One of the Three