In Information Security, Which of the Following Is True of Managing

question 39

Multiple Choice

In information security, which of the following is true of managing risk?

• A) All organizations except financial institutions should invest heavily in security safeguards.
• B) Organizations should implement safeguards that balance the trade-off between risk and cost.
• C) Passwords are classified under the technical safeguards category.
• D) Physical security is classified under the human safeguards category.

---

Definitions:

Not-for-Profit Entity

An organization whose primary goal is not to make a profit but to pursue a mission of public or social benefit.

Recipient

An individual or organization that receives something from another entity, often within the context of transactions or awards.

Charitable Entity

An organization established for philanthropic rather than profit-making purposes, benefiting the public or a particular social cause.

Cash Contributions

Monetary gifts made by individuals or organizations to entities such as companies, nonprofits, or trusts, often for specific purposes or projects.