Justifying Information Security Projects

question 53

Multiple Choice

Justifying information security projects

• A) is not needed because it is well-known that preventing network security problems is less labor intensive than cleaning up virus infections.
• B) is not done because ROI calculators are not available.
• C) should focus on defending against external threats such as hackers and malware.
• D) should be done because employee security training is usually poorly done.

---

Definitions:

Defined Benefit Plan

A type of pension plan in which an employer promises a specified pension payment upon retirement, based on the employee's earnings history, tenure of service, and age.

Post-Employment Plans

Financial arrangements made by employers to provide employees with benefits after retirement, such as pensions.

Accumulating Non-Vesting

Benefits or rights that accumulate over time in favor of an employee, which are not lost despite not meeting certain vesting criteria.

Long Service Leave

An employee benefit that provides paid leave for employees who have served a particular period of time with the same employer or industry.