Security is a property of a system that is as hard to define in terms of an absolute measurement, perhaps as hard as measuring the beauty of a flower. CISOs must routinely ask questions such as, Is my organization secure? Are the personnel I protect sufficiently educated and trained to minimize the risks to the organization? Are my deployed best-of-breed security controls still working? These and many other related questions are often answered qualitatively, if at all, but rarely are hard measurements provided.”]
Source: https://www.csoonline.com/article/3263744/best-of-breed-how-secure-are-you-really.html