Which of the following provides the MOST useful information when assessing whether an organization has appropriately managed its level of risk compared to its e...