CISM: Certified Information Security Manager

Changes denied for insufficient security details directly indicate whether change requests contain the security information required by the change-management process. This metric measures the incorporation and enforcement of security requirements before changes are approved.