Information regarding security deficiencies and the value of security initiatives can affect organization priorities and resource investments. Consequently, if this information is inaccurate it can seriously harm an organization's ability to achieve business and risk management objectives. In this session, Jack will discuss common information deficiencies, their effects, and how to avoid them.