Justifying Information Security Projects

question 53

Multiple Choice

Justifying information security projects

• A) is not needed because it is well-known that preventing network security problems is less labor intensive than cleaning up virus infections.
• B) is not done because ROI calculators are not available.
• C) should focus on defending against external threats such as hackers and malware.
• D) should be done because employee security training is usually poorly done.

---

Definitions:

Diseconomies Of Scale

Diseconomies of Scale arise when a company or business grows so large that the costs per unit increase, leading to inefficiency and increased production costs.

Utilization

The ratio of the actual output of a facility to its potential output under full capacity, usually expressed as a percentage.

Efficiency

Actual output as a percent of effective capacity.

Effective Capacity

The maximum output level that an organization can sustain under normal conditions, considering the limitations of time, resources, and constraints.