A non-technical executive asks, 'Are we secure?' What is the most appropriate response?
-
A
'Yes, we use a firewall and antivirus.'
-
B
'Security is a continuous process; here is our current risk posture and the controls we have in place.'
-
C
'That question is too broad to answer.'
-
D
'We have passed all compliance audits.'