Which of the following measurements of an enterprise’s security state is the process whereby an
organization establishes the parameters within which programs, investments, and acquisitions
reach the desired results?

A.
Information sharing

B.
Ethics

C.
Performance measurement

D.
Risk management