Watch this video on YouTube
Which of the following is the best metric to measure the success of an information security program?