Organizations Must Consider All but Which of the Following During

question 108

Multiple Choice

Organizations must consider all but which of the following during development and implementation of an information security measurement program?

• A) Measures must yield quantifiable information (percentages, averages, and numbers)
• B) Data that supports the measures needs to be readily obtainable
• C) Only repeatable information security processes should be considered for measurement
• D) Measures must be useful for tracking shortfalls in organizational resources

---

Definitions:

Depth of Processing

A theory regarding the levels at which information is mentally processed, affecting its memorability and the strength of recall.

Job-refusal Message

A communication sent to reject a job offer, typically emphasizing gratitude for the offer and sometimes providing reasons for the decision.

Inductive Sequence

An arrangement of information or arguments that starts with specific observations and leads to a general conclusion.

Deductive Sequence

A logical arrangement of information or arguments that starts from a general premise and leads to a specific conclusion.