Which of the following metrics would BEST enable an enterprise to evaluate an alignment goal specifically related to security of information and privacy?

Which of the following metrics would BEST enable an enterprise to evaluate an alignment goal specifically related to security of information and privacy?
A . Ratio and extent of erroneous business decisions in which erroneous I&T-related information was a key factor
B . Number of critical business processes supported by up-to-date infrastructure and applications
C . Number of confidentiality incidents causing financial loss, business disruption or public embarrassment.

Answer: C

Explanation:

Reference: https://community.mis.temple.edu/mis5203sec001sp2019/files/2019/01/COBIT-2019-Framework-Introduction-and-Methodology_res_eng_1118.pdf (31)