Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment of the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches?
A)understanding which information assets need protection
B)evaluating controls and filling in security gaps
C)predicting future risks and devising strategies to prevent them
D)recovering existing assets from damage

Question

Quizplus · Accepted Answer

Understanding which information assets need protection is the first step in assessing the firm's readiness to face any potential security breaches. This will allow Lora Jones to identify the sensitive data that requires protection and prioritize her efforts accordingly. Only after identifying the assets that need protection can she move on to evaluating controls and filling in security gaps, predicting future risks, and devising strategies to prevent them, and recovering existing assets from damage.

Lora Jones Is a Security Expert Hired by a Manhattan-Based