The CEO of a medium-sized insurance company in a medium-sized city in Tennessee is reluctant to authorize the expenditure for a security audit.The CEO maintains that since Tennessee is not subject to hurricanes or earthquakes and there are no obvious terrorist targets nearby,a security audit would be a waste time and money.As the director of HR,you should
A) agree with the CEO because of the low probability of security threats.
B) point out that OSHA requires security audits for firms with over 1,000 employees.
C) indicate that insurance premiums are lower for firms that conduct security audits.
D) argue that the company deals with sensitive data subject to unauthorized access.

Question

Quizplus · Accepted Answer

The best choice would be to argue that the company deals with sensitive data subject to unauthorized access. Even if the city doesn't face natural disasters or terrorist threats, there is always a risk of cyber attacks or internal security breaches. A security audit would help identify vulnerabilities and protect the company's sensitive data.

The CEO of a Medium-Sized Insurance Company in a Medium-Sized