Watch this video on YouTube
What provides the most extensive insight into the information security status of an organization?