You are assessing risks and determining which asset protection policies to create first. Another member of the IT staff has provided you with a list of assets which have importance weighted on a scale of 1 to 10. Internet connectivity has an importance of 8, data has an importance of 9, personnel have an importance of 7, and software has an importance of 5. Based on the weights, what is the order in which you will generate new policies?
A.
Internet policy, data security, personnel safety policy, software policy.
B.
Data security policy, Internet policy, software policy, personnel safety policy.
C.
Software policy, personnel safety policy, Internet policy, data security policy.
D.
Data security policy, Internet policy, personnel safety policy, software policy.
Explanation:
1. 1. 9 Data policy
2. 2. 8 Internet connection
3. 3. 7 personnel
4. 4. 5 software