Which of the Following Is NOT One of the Three

question 18

Multiple Choice

Which of the following is NOT one of the three types of performance measures used by organizations?

• A) Those that determine the effectiveness of the execution of InfoSec policy
• B) Those that determine the effectiveness and/or efficiency of the delivery of InfoSec services
• C) Those that evaluate the compliance of non-security personnel in adhering to InfoSec policy
• D) Those that assess the impact of an incident or other security event on the organization
• Or its mission

---

Definitions:

Contractual Promise

A binding pledge or agreement between parties that is enforceable by law.

Unauthorized Alteration

A change made to a document, instrument, or agreement without the consent or knowledge of all parties involved, which can affect its validity or legality.

Material Terms

Significant conditions and details in a contract that are essential to the agreement and affect the parties' obligations and expectations.

Written Contract

A legally binding agreement that has been put in writing and signed by the parties involved.