In information security, which of the following is True about managing risk?
A) All organizations except financial institutions should invest heavily in security safeguards.
B) Organizations should implement safeguards that balance the trade-off between risk and cost.
C) Passwords are classified as technical safeguards.
D) Physical security is classified as human safeguards.

Question

Quizplus · Accepted Answer

Managing risk in information security involves implementing safeguards that balance the trade-off between risk and cost. This means that organizations should carefully consider the potential impact of a security breach and implement appropriate safeguards that are cost-effective. Passwords are a type of access control, which falls under administrative safeguards. Physical security measures, such as locks and surveillance cameras, are examples of physical safeguards. Financial institutions are often subject to tighter regulations and are required to invest heavily in security safeguards, but this does not necessarily apply to all organizations.

In Information Security, Which of the Following Is True About