Which of the following metrics MOST effectively measures an organization's security posture?

The correct answer is B. Reduction in the number of undetected security events. A reduction in undetected security events indicates improved threat detection capabilities, which directly reflects the organization's ability to identify and mitigate risks in a timely manner. This metric provides insight into the effectiveness of security measures and the…

Submitted by olafpl· Apr 18, 2026Protection of Information Assets

Question

Which of the following metrics MOST effectively measures an organization’s security posture?

Options

AIncrease in the number of external threats detected
BReduction in the number of undetected security events
CNumber and frequency of subsequently discovered unreported incidents
DTime and costs spent resolving security-related incidents

How the community answered

(30 responses)

A
13% (4)
B
77% (23)
C
3% (1)
D
7% (2)

Explanation

A reduction in undetected security events indicates improved threat detection capabilities, which directly reflects the organization's ability to identify and mitigate risks in a timely manner. This metric provides insight into the effectiveness of security measures and the organization's overall security posture.

Topics

#Security Metrics#Security Posture#Incident Detection#Information Security Measurement

Community Discussion

No community discussion yet for this question.

Full CISA Practice