Match each term with the correct statement below.

A. A measurement process that produces discrete objective data
B. The specific framework of controls used by an organization
C. A response in advance of a potential incident
D. The present status of the elements of an operating environment
E. A collection of explicit controls designed to accomplish a purpose
F. Additional work required to finalize a solution; usually results from a review
G. Large-scale process designed to ensure management control
H. Formal process used to identify and characterize threats
I. A response that takes place after an incident has occurred

A. Metrics
B. Security architecture
C. Proactive response
D. Baseline
E. Control framework
F. Rework
G. Strategic governance
H. Threat assessment
I. Reactive response