Question

Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment of the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches?A) Understanding which information assets need protectionB) Evaluating controls and filling in security gapsC) Predicting future risks and devising strategies to prevent themD) Recovering existing assets from damage

Answer 1

Answer:

A) Understanding which information assets need protection

Explanation:

The first thing Lora must do is determine which data assets need to be protected. This applies to all security protocols, since the person in charge of the security must first know what he/she is supposed to protect in order to determine what is the best way to protect it.

Imagine if Lora didn't know what assets were important and which weren't, how could she know what thing she should be protecting?