The ultimate goal of an IT security projects is:

Question

Options

• AIncrease stock value
• BComplete security
• CSupport business requirements
• DImplement information security policies

• A
  3% (1)
• B
  14% (4)
• C
  72% (21)
• D
  10% (3)

Explanation

IT security exists to enable the organization to function safely and effectively, making supporting business requirements the correct answer - security is a means to a business end, not an end in itself. Option A (stock value) is a potential side effect of good security, not a goal that security teams directly target. Option B (complete security) is impossible in practice; security is always a risk trade-off, never absolute. Option D (implementing policies) is an activity within a security program, not the ultimate purpose of one.

Memory tip: Think of security as a service department - like HR or IT support, its ultimate purpose is to enable the business to operate. If a security control can't be justified by a business need, it probably shouldn't exist.

No community discussion yet for this question.