A critical component of a continuous improvement program for information security is:
A.
measuring processes and providing feedback.
B.
developing a service level agreement (SLA) for security.
C.
tying corporate security standards to a recognized international standard.
D.
ensuring regulatory compliance.
Explanation:
If an organization is unable to take measurements that will improve the level of its safety program, then continuous improvement is not possible. Although desirable, developing a service level agreement (SLA) for security, tying corporate security standards to a recognized international standard and ensuring regulatory compliance are not critical components for a continuous improvement program.