Which of the Following Is Considered the First Step for a Corporation

Multiple Choice

Which of the following is considered the first step for a corporation in managing security?

A) To decide where the security function will sit on a firm's organization chart
B) To determine what devices need secured and which software to use to do that
C) To determine the size of the security staff and the budget that will support that staff
D) To decide the objectives of the security function