Base lining
• Organizations do not have any contact to each other
• No two organizations are identical to each other
• The best practices are a moving target
• Knowing that what was happening on in information security industry in the recent years through benchmarking does not necessarily prepare for what is next
Analysis of measures against the standards which are established. In information security, base lining is comparison of security activities and events against the future performance of organizations.