Which activity is most closely related to security metrics?

A. bypassing management approval B. deleting backup copies without approval C. ignoring risks and controls D. measurable indicators of security performance