Which of the following would be MOST useful when illustrating to senior management the status of a recently implemented information security governance framewor...