-- Exhibit Company management has indicated that instant messengers (IM) add to employee productivity. Management would like to implement an IM solution, but does not have a budget for the project…

Product A lacks one or more critical security features present in Product C as shown in the feature matrix, making it a weaker candidate for an enterprise deployment with security requirements.

Product B does not offer the same level of security controls as Product C based on the feature comparison in the exhibit, resulting in a higher residual risk profile.

The feature matrix evaluation identifies Product C as the solution with the most comprehensive security capabilities, likely including end-to-end encryption, on-premises or private server hosting, and access controls that meet enterprise security requirements. Selecting the product with the strongest native security features minimizes residual risk without requiring additional budget for compensating controls. This approach allows the security engineer to satisfy management's productivity requirement while maintaining an acceptable security posture.

Product D is missing key security capabilities identified in the matrix that Product C provides, making it unsuitable for deployment in a security-conscious organization.