Justifying Information Security Projects

Multiple Choice

Justifying information security projects

A) is not needed because it is well-known that preventing network security problems is less labor intensive than cleaning up virus infections.
B) is not done because ROI calculators are not available.
C) should focus on defending against external threats such as hackers and malware.
D) should be done because employee security training is usually poorly done.