In information security, which of the following is true of managing risk?
A) All organizations except financial institutions should invest heavily in security safeguards.
B) Organizations should implement safeguards that balance the trade-off between risk and cost.
C) Passwords are classified under the technical safeguards category.
D) Physical security is classified under the human safeguards category.

Question

Quizplus · Accepted Answer

Managing risk in information security requires implementing safeguards that balance the trade-off between risk and cost. It is not necessary for all organizations except financial institutions to invest heavily in security safeguards. Passwords fall under administrative safeguards and physical security falls under physical safeguards, not human safeguards.

In Information Security, Which of the Following Is True of Managing