What is the primary purpose of security metrics in information assurance?

A. measurable indicators of security performance B. choosing office wall colors C. using one shared account for everyone D. ignoring risks and controls