In terms of IT management spanning across Security, IT architecture and design, how does one define end of the year performance criteria for each of the departments? I mean, something that’s more quantitative than qualitative.
As an example: For the Dept of IT Architecture and Security, how can a CIO effectively measure and gauge at the end of the year, as an overall performance criteria for the Information Security Officer’s role in that department’s management?