Which of the following metrics is MOST useful to ensure IT services meet business requirements?

The number of discontinued business transformation programs reflects broader business strategy execution failures, not the direct effectiveness of IT services in meeting ongoing business requirements.

Frequent updates to IT services risk profiles demonstrate a proactive approach to identifying, assessing, and mitigating potential threats to service delivery, directly impacting the reliability and continuity of services and ensuring they continue to align with evolving business requirements and acceptable risk levels.

The frequency of IT policy updates indicates policy governance activity but does not directly measure whether IT services are consistently meeting operational business requirements.

The number of business disruptions due to IT incidents is a reactive metric showing when IT services *failed* to meet requirements, rather than a proactive measure ensuring they *will* meet them.