A Newly Hired Security Analyst Has Joined an Established SOC

Multiple Choice

A newly hired security analyst has joined an established SOC team. Not long after going through corporate orientation, a new attack method on web-based applications was publicly revealed. The security analyst immediately brings this new information to the team lead, but the team lead is not concerned about it. Which of the following is the MOST likely reason for the team lead's position?

A) The organization has accepted the risks associated with web-based threats.
B) The attack type does not meet the organization's threat model.
C) Web-based applications are on isolated network segments.
D) Corporate policy states that NIPS signatures must be updated every hour.