How can benchmarking support continual improvement?

• A.Comparing security spend, headcount, and tooling budgets against industry peers shows where the organization can cut cost, with the gap used like the improvement target
• B.Benchmarking is reserved for the certification body, and internal teams use its report
• C.Comparing security practices, metrics, and maturity against industry peers identifies areas where the organization can improve
• D.Benchmarking against peers sets the risk appetite, and replaces the internal risk assessment