Before the people who are responsible for security make any decisions about information security defenses, they must understand __________.
A) The requirements and operations of the business
B) How firewalls, anti-virus software, and other technology function
C) Tactics of hackers, fraudsters, botnets, and identity thieves
D) How much to invest in risk management

Question

Quizplus · Accepted Answer

Understanding the requirements and operations of the business is essential for making informed decisions about information security defenses. Without this understanding, decisions may be misaligned with the needs of the business and may not effectively protect critical assets. Understanding technology and tactics of attackers is also important, but understanding the business should come first. The amount to invest in risk management should be informed by the business requirements and the level of risk that the organization is willing to accept.

Before the People Who Are Responsible for Security Make Any