Lora Jones Is a Security Expert Hired by a Manhattan-Based

Multiple Choice

Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment of the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches?

A) understanding which information assets need protection
B) evaluating controls and filling in security gaps
C) predicting future risks and devising strategies to prevent them
D) recovering existing assets from damage