As an Information Security Manager, during a presentation to the board of directors on the importance of security, which piece of information would most clearly demonstrate the effectiveness and alignment of your security measures with business objectives?