Which of the following is NOT one of the three types of performance measures used by organizations?
A) Those that determine the effectiveness of the execution of InfoSec policy
B) Those that determine the effectiveness and/or efficiency of the delivery of InfoSec services
C) Those that evaluate the compliance of non-security personnel in adhering to InfoSec policy
D) Those that assess the impact of an incident or other security event on the organization
Or its mission

Question

Quizplus · Accepted Answer

The three types of performance measures used by organizations are effectiveness of the execution of InfoSec policy, effectiveness and/or efficiency of the delivery of InfoSec services, and assessing the impact of an incident or other security event on the organization or its mission. The evaluation of non-security personnel's compliance with InfoSec policy is not one of the three types.

Which of the Following Is NOT One of the Three