Organizations Must Consider All but Which of the Following During

question 20

Multiple Choice

Organizations must consider all but which of the following during development and implementation of an InfoSec measurement program?

• A) Measurements must yield quantifiable information
• B) Data that supports the measures needs to be readily obtainable
• C) Only repeatable InfoSec processes should be considered for measurement
• D) Measurements must be useful for tracking non-compliance by internal personnel

---

Definitions:

Sale Price

The final amount at which a product or service is sold to consumers.

Marked Up

Refers to an increase in the selling price of goods or services, typically to create a profit margin above the cost.

Operating Expenses

Costs that a business incurs through its normal business operations, such as wages, rent, and utilities.

Wholesaler

A person or company that sells goods in large quantities at low prices, typically to retailers.