Similarly, as discussed previously, managers are looking for practical techniques for more precisely measuring the value of security controls and obtaining better data on risk factors.
The managers do not care about risk factors and value of security controls.