medium
Single Answer
0Leonidas has been tasked with identifying security controls for systems covered by his organization's information classification system. Why might Leonidas choose to use a security baseline?
Answer Options
A
It applies in all circumstances, allowing consistent security controls.
B
They are approved by industry standards bodies, preventing liability.
C
They provide a good starting point that can be tailored to organizational needs.
D
They ensure that systems are always in a secure state.
Correct Answer: C
Explanation
Security baselines provide a starting point to scope and tailor security controls to your organization's needs. They aren't always appropriate to specific organizational needs, they cannot ensure that systems are always in a secure state, and they do not prevent liability.