Security Governance.
anomalies to correlate to risk factors) Operational Patch Management Average — Length of time to patch systems Average — Length of time to patch network components Percentage of systems in compliance with organizationally mandated configuration guidance Percentage of managed systems for which an