In information security, which of the following is True about managing risk?
A) All organizations except financial institutions should invest heavily in security safeguards.
B) Organizations should implement safeguards that balance the trade-off between risk and cost.
C) Passwords are classified as technical safeguards.
D) Physical security is classified as human safeguards.
E) All risks should be eliminated.

Question

Quizplus · Accepted Answer

It is not practical or feasible to eliminate all risks in information security. Instead, organizations should implement safeguards that effectively balance the trade-off between risk and cost, ensuring that the cost of the safeguard is not greater than the potential loss due to a security breach. This approach is known as risk management. Passwords are a type of access control safeguard, which is a category of technical safeguards. Physical security, on the other hand, is classified as a physical safeguard, which is also a type of technical safeguard.

In Information Security, Which of the Following Is True About