Which of the following key performance indicators (KPIs) provides stakeholders with the MOST useful information about whether information security risk is being...