Question 156
Main Page
What’s the primary goal of risk-based asset protection in security programs?
A. Encrypt everything by default
B. Provide the same protection to all assets
C. Allocate controls based on asset value and risk exposure
D. Prioritize IT over business needs
Answer: Allocate controls based on asset value and risk exposure
Effective protection means matching control strength to asset value and threat likelihood.