Although we identified no organizations that had made significant progress in applying such measures , we found that more precisely measuring the positive and negative effects of security on business operations is an area of developing interest among many information security experts .
Measuring positive and negative effects of security on business operations is of interest to C-level executives .