Metrics and Accountability

Data metrics have been set and accountability for information system security configuration and change management requirements in the organisation has been assigned to key management