Which of the following best describes the best way to start the development of an overall security plan?:
A) cCreate and staff a formal IT management position that is exclusively focused on information security.
B) eExamine the costs of replacing systems and applications.
C) rReview those operational areas that have the greatest financial impact on the firm.
D) lLook at the alternative ways to keep the systems and applications going in the event of a catastrophe.

Question

Quizplus · Accepted Answer

Examining the operational areas that have the greatest financial impact on the firm is the best way to start the development of an overall security plan as it allows for a risk-based approach to security where resources can be allocated based on potential impact. Creating a formal IT management position solely for security (A) and examining the costs of replacing systems and applications (B) are important components of security planning but are not the best starting point. Looking at alternative ways to keep systems running in case of a catastrophe (D) is part of contingency planning but not the best starting point for an overall security plan.

Which of the Following Best Describes the Best Way to Start