Security Governance.
automated patch management process is used Average — Length of time from patch release to patch installation Vulnerability Management Infrastructure Percentage of managed systems checked for vulnerabilities in accordance with the organization’s policy Average — Length of time for the organization