An organization states, “We want to improve the consistency of security assessments.” What additional item would most directly make progress measurable?

### Why this is right The stated aim is qualitative. A quantitative key result would provide a way to measure progress toward it, which is the distinction made in the course material. ### The concept Objectives provide direction, while key results or outcomes provide measurable evidence. Measures should relate to the stated aim; otherwise, they may track activity without showing whether the objective is being achieved. The framework can structure this assessment, but the organization must define suitable measures. ### The other options - **A second qualitative objective with no measure**: may add direction but does not directly measure progress. - **A statement that frameworks prevent every attack**: is unsupported and incorrectly treats a framework as a guarantee. - **A list of unrelated technologies**: does not establish a measure tied to the objective. ### Terms - **Key result**: a quantitative outcome used to measure progress toward an objective. ### Remember Choose a measure that directly reflects the objective, rather than counting unrelated activity.