Watch this video on YouTube
What provides the most objective basis for measuring value delivery in information security governance when considering the value of assets?