Question

Why is it difficult to conduct a security cost-benefit justification for controls before an attack occurs?.

Answer 1

The impact of a phishing is difficult to predict, making it challenging to do a cost-benefit analysis of safeguards before an attack occurs.

What is phishing?

Phishing is a form of social engineering in which an attacker sends a message pretending to be someone else in order to mislead the recipient into giving the attacker access to their personal information or to install malicious software, such as ransomware, on their infrastructure. Phishing attempts are getting more and more complex, and they frequently transparently duplicate the site that is being targeted, giving the attacker complete access to the victim's computer and enabling them to breach any further security measures. With the FBI's Internet Crime Complaint Centre registering more than twice as many instances of phishing as any other type of computer crime as of 2020, phishing is by far the most frequent attack carried out by cybercriminals.

Learn more about phishing, here:

brainly.com/question/23021587

#SPJ4