Item 10 Interactive Quiz 4. Operationalizing Risk Mitigation.pdf

Correct

Which statement(s) about information architectures and IT architectures are most correct?
Securing the IT architecture first provides the fastest path to a prudent security posture; once that is achieved, a
vulnerability assessment of the information architecture can be done to reveal other residual risks.
Without effective education and training of all members of the organization, the IT architecture cannot be made
secure or kept secure.
The IT architecture's security is primarily dependent on technical or logical controls; these need to be determined
first, and then they will inform policy writers as they create or update administrative security requirements for the
information architecture.