Examine the process(es) of collecting information security measures, how often do they need to be collected, what are the downsides of collecting and reporting the measures too frequent or too seldom.

Based on http://www.noticebored.com/html/metrics.html

Collecting information security measures should be taken often as needed. However, the essential information should be extracted from it depending on the relevance of information. The downside of collecting too much could provide unimportant data and collecting too few might not provide what is needed. Careful analysis should be given to identify which can be benefial to the company and which is not.

This means that security measurement should only measure what is intended to avoid wasting time and costs. It would increase efficiency and security systematic organization.

Truehope this : )