Watch this video on YouTube
In an organization seeking to establish effective information security metrics, what should be the primary focus to ensure alignment with business objectives?