Which of the following measurements of an enterprise’s security state is the process whereby an
organization establishes the parameters within which programs, investments, and acquisitions reach
the desired results?

A.
Information sharing

B.
Ethics

C.
Performance measurement

D.
Risk management

Explanation:
Performance measurement is the process whereby an organization establishes the parameters
within which programs, investments, and acquisitions reach the desired results. This process of
measuring performance often requires the use of statistical evidence to determine progress toward
specific defined organizational objectives. Fundamental purpose behind measures is to improve
performance. This is conducted with the same rigor as for other enterprise business units, functions,
and processes.
Answer option D is incorrect. Risk management is the identification, assessment, and prioritization
of risks followed by coordinated and economical application of resources to minimize, monitor, and

control the probability or impact of unfortunate events or to maximize the realization of
opportunities.
Answer option B is incorrect. Ethics are the rules of personal behavior.
Answer option A is incorrect. Information sharing includes ensuring that the right information is
collected, retained, and communicated to the right parties at the right time.