Which outcome is expected from effective security metrics?

A. choosing office wall colors B. measurable indicators of security performance C. removing all documentation D. bypassing management approval