https://de.apacode.com/post/which-of-the-following-is-the-best-indicator-that-security-policy-is-effective