Every organization needs to develop an information security department or program of its own.

Question

Quizplus · Accepted Answer

While it is important for organizations to have measures in place to protect their sensitive information, it is not necessary for every organization to have a separate information security department or program. Small businesses or organizations with simple technology needs may be able to handle their information security with just a few basic measures, while larger organizations may require a more complex and sophisticated approach. Ultimately, the level of investment in information security should be proportional to the risks faced by the organization.

Every Organization Needs to Develop an Information Security Department or Program