The mean time to patch, number of virus outbreaks prevented, and number of vulnerabilities mitigated...

 Definition of Operational Metrics:

Operational metrics measure the day-to-day effectiveness of security processes and controls.

Examples include patching times, virus prevention rates, and vulnerability mitigation efforts.

 Why This is Correct:

These metrics focus on operational activities that maintain security and efficiency.

 Why Other Options Are Incorrect:

A. Risk Metrics: Measure potential risks, not operational activities.

B. Management Metrics: Focus on strategic outcomes, not daily operations.

D. Compliance Metrics: Measure adherence to regulations, not operational performance.

 References:EC-Council identifies metrics like mean time to patch and vulnerabilities mitigated as key operational metrics for maintaining security effectiveness.