What is the most effective gauge of success for a security policy among the following?
A. Number of security controls developed as a result
B. The number of people aware of the policy
C. Reduction in risk
D. The rank of the highest executive who approved it
FUD
