The answer is Tailoring the baseline to their needs.
After an organization selects applicable security control baseline but finds not all of the controls apply, it initiates a tailoring process to modify the controls appropriately and more closely with specific conditions related to organizational missions, information systems or environments of operation. It is an integral part of the security control selection and specification and involves risk management processes like assessing, responding to, and framing.
Answer:
The answer is "Procedure"
Explanation:
In the given statement certain information is missing, that is choices, which can be described as follows:
a. procedure
b. software
c. data
d. hardware
e. memory
The procedure is a way, that accomplishes any task in the following steps, if there is a long process so, we divide this process into parts or modules to accomplish the task, and certain alternative was wrong, that can be described as follows:
- Software is a program, that is accomplished in the procedure.
- data, It describes all procedures.
- hardware, It is a device, in which we work.
- memory, It stores all the data in a procedure.
