Obtaining better data on risk factors and measuring the value of security controls are a priority of managers.
Similarly, as discussed previously, managers are looking for practical techniques for more precisely measuring the value of security controls and obtaining better data on risk factors.