Organizations Must Consider All but Which of the Following During

question 20

Multiple Choice

Organizations must consider all but which of the following during development and implementation of an InfoSec measurement program?

• A) Measurements must yield quantifiable information
• B) Data that supports the measures needs to be readily obtainable
• C) Only repeatable InfoSec processes should be considered for measurement
• D) Measurements must be useful for tracking non-compliance by internal personnel

---

Definitions:

Cost of Goods Sold

Costs incurred directly from the production of goods a company offers for sale, covering material and labor expenses.

Work in Process Inventory

Goods partially completed during the manufacturing process, consisting of labor, raw materials, and overhead costs incurred to date.

Finished Goods Inventory

The collection of products that have been completed and are available for sale, yet remain unpurchased.

Operating Expenses

Costs that are necessary for the day-to-day functioning of a business, excluding direct material and direct labor costs.