A company wants to quantify and communicate the effectiveness of its security controls but must establish measures. Whic

[answerhappygod]

A company wants to quantify and communicate the effectiveness of
its security controls but must establish measures. Which of the
following is MOST likely to be included in an effective assessment
roadmap for these controls?
A. Create a change management process.
B. Establish key performance indicators.
C. Create an integrated master schedule.
D. Develop a communication plan.
E. Perform a security control assessment.