The infosec measurement development process recommended by NIST is divided into major activities that include all of the following except _____.
a) Define the measurement objectives
b) Develop measurement indicators
c) Implement security controls
d) Collect data and analyze results