Which of the following is the BEST metric to obtain when gaining support for an Identify and Access Management (IAM) solution?

Application connection successes resulting in data leakage is a contradictory and counterproductive metric - successful connections causing leakage would indicate a security failure, not a benefit, and does not support the case for implementing IAM.

Administrative costs for restoring systems after connection failure are more relevant to business continuity and disaster recovery solutions than to IAM, which primarily governs identity lifecycle and access control rather than system restoration.

Employee system timeouts from implementing wrong limits describe a misconfiguration problem that would actually argue against a poorly implemented IAM solution, rather than providing a positive metric to gain executive support for one.

Password reset requests are one of the most frequently cited and quantifiable costs that IAM solutions directly reduce - studies commonly show they account for 20-50% of help desk call volume. This metric provides a concrete, dollar-denominated business case that executives and budget holders can evaluate, making it the strongest justification for investing in an IAM solution. It directly ties the IAM investment to measurable operational savings.