Which metric indicates how many privileged access reviews have been completed?

• A. Total number of login attempts.
• B. Number of privileged access reviews completed.
• C. Amount of data stored.
• D. Number of new employees onboarded.

Answer: (B)

Measuring privilege governance progress hinges on tracking how many reviews have actually been completed. A privileged access review is the process of checking who has elevated permissions and deciding whether those permissions are still needed. The metric that best reflects this activity is simply the count of completed reviews, because it shows whether the review cycle is being carried out and finished as planned.

This matters because it directly measures compliance with the governance process, not just activity within the system. For example, total login attempts tell you how often people try to sign in, but they don’t reveal whether privileged access reviews were performed. The amount of data stored reflects data volume, not security reviews. The number of new employees onboarded tracks hiring, not permission audits.