Which measurements align with business goals for evaluation?

• A. Access Review
• B. Reporting and Auditing
• C. Metrics Indicators
• D. Inconsistent Processes

Answer: (C)

Measuring what matters means choosing indicators that reflect business goals and show how well you’re achieving them. Metrics indicators are those tangible measures that translate strategic objectives into numbers you can track, compare over time, and use to evaluate progress. They turn goals into actionable data, so you can see whether you’re moving in the right direction and where to focus improvement efforts.

For example, if a business goal is to improve security while maintaining a smooth user experience, metric indicators might include the percentage of accounts with MFA enabled, average time to provision access, or the rate of completed access reviews on schedule. These numbers directly map to outcomes the business cares about and provide a clear basis for evaluation.

An access review is a governance activity that helps ensure permissions are appropriate; while its results can feed metrics, the activity itself isn’t the measurement of business progress. Reporting and auditing describe how data is collected and verified, not the specific measurements tied to business goals. Inconsistent processes point to problems in how work is done, not to a measurement that reflects goal attainment.

So, the best choice is metrics indicators because they provide the aligned, actionable data needed to evaluate how well business goals are being met.