Security Governance.
Security Exceptions Number of Non-managed Changes (outside of formal process) Percentage of cyber resources which can be reconfigured on demand Time between decision to reconfigure resources and completion of reconfiguration Percentage of cyber resources which can be [automatically, manually]