Câu 103: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

A company wants to quantify and communicate the effectiveness of its security controls but must establish measures. Which of the following is MOST likely to be included in an effective assessment roadmap for these controls?

1. A. Create a change management process.
2. B. Establish key performance indicators. — đáp án hiện tại
3. C. Create an integrated master schedule.
4. D. Develop a communication plan.
5. E. Perform a security control assessment.