Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment of the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches?
A) understanding which information assets need protection
B) evaluating controls and filling in security gaps
C) predicting future risks and devising strategies to prevent them
D) recovering existing systems from damage

Question

Quizplus · Accepted Answer

Understanding which information assets need protection is the first step in assessing the firm's readiness to face potential security breaches. By identifying these assets, Lora Jones can prioritize her evaluation and focus on implementing appropriate security measures to protect them. Evaluating controls, predicting future risks, and recovering existing systems from damage can only be done after identifying the data assets that need protection.

Lora Jones Is a Security Expert Hired by a Manhattan-Based