An organization's information security department has recently created a centralized governance model to ensure that network-related findings are remediated within the service level agreement (SLA). What should the IS auditor use to assess the maturity and capability of this governance model?
- Key risk indicators (KRIs)
- Key process controls
- Key data elements
- Key performance indicators (KPIs)
Reveal Solution Next Question