Which of the Following Is True About Protecting Infrastructure and Data

Multiple Choice

Which of the following is true about protecting infrastructure and data?

A) The IT department is responsible for protecting infrastructure and data from threats.
B) One of the sources of threats to IT infrastructure is malicious human activity.
C) The responsibility of identifying threats is left to the IS department while managing these threats is the IT department's job.
D) The IS department works with the CTO and others in the organization to determine what safeguards to implement, or stated differently, what level of risk to assume.