Performance measurements are seldom required in today's regulated InfoSec environment.

Question

Performance measurements are seldom required in today's regulated InfoSec environment. ​

Quizplus · Accepted Answer

Performance measurements are often required in regulated InfoSec environments as a way to measure compliance and effectiveness of security controls. Organizations are required to conduct assessments of their security posture, measure the effectiveness of their security controls, and report on performance to regulatory bodies. Failure to meet performance standards can result in penalties or loss of certification.

Performance Measurements Are Seldom Required in Today's Regulated InfoSec Environment