Your organization collects several security metrics on a daily, weekly, and monthly basis. However, you determine that no one has been paying any attention to the metrics. You meet with management to discuss security metrics. What should you mention regarding these metrics?

They provide information on both short$-$ and long$-$term trends.

They provide information on only long$-$term trends.

They provide information on only short$-$term trends.

They are not needed as part of your organization's security policies.