The CEO of a Medium-Sized Insurance Company in a Medium-Sized

Multiple Choice

The CEO of a medium-sized insurance company in a medium-sized city in Tennessee is reluctant to authorize the expenditure for a security audit.The CEO maintains that since Tennessee is not subject to hurricanes or earthquakes and there are no obvious terrorist targets nearby,a security audit would be a waste time and money.As the director of HR,you should

A) agree with the CEO because of the low probability of security threats.
B) point out that OSHA requires security audits for firms with over 1,000 employees.
C) indicate that insurance premiums are lower for firms that conduct security audits.
D) argue that the company deals with sensitive data subject to unauthorized access.