Multiple choice technology security

As a corporate Information Security co-ordinatior, what’s more important to focus on mainly

  1. Threats

  2. Vulnerabilities

  3. Threats & Vulnerabilities

  4. All of the above

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Security coordinators must focus on both threats (potential attackers/exploits) and vulnerabilities (weaknesses in systems). Understanding only threats is useless without knowing what vulnerabilities they could exploit. Conversely, knowing vulnerabilities without understanding threat scenarios makes it hard to prioritize what to fix. Option C correctly recognizes that effective security management requires understanding both sides of the risk equation.