Certified Chief Information Security Officer (CCISO) — Question 85

If your organization operates under a model of "assumption of breach", you should:

Answer options

• A. Establish active firewall monitoring protocols
• B. Purchase insurance for your compliance liability
• C. Focus your security efforts on high value assets
• D. Protect all information resource assets equally

Correct answer: C

Explanation

Focusing security efforts on high value assets is essential under the 'assumption of breach' model because it allows organizations to allocate resources effectively to protect their most critical data. The other options, while valuable, do not specifically address the need to prioritize security based on asset value in the face of potential breaches.