Which of the following would be the BEST key risk indicator (KRI) to show progress in IT employee behavior?

An IT audit report indicates that a lack of IT employee risk awareness is creating serious security issues in application design and configuration .

Which of the following would be the BEST key risk indicator (KRI) to show progress in IT employee behavior?
A . Number of IT employees attending security training sessions
B . Results of application security testing
C . Number of reported security incidents
D . Results of application security awareness training quizzes

View Answer

Answer: B