you are the it security director for the weezle pretzle company you have convinced top management the need to implement iso 27002

Required
a. Write a report to your CFO explaining various options for evaluating information security effectiveness.