Hmm, I'm leaning towards B. Immature security controls and procedures scream of management neglect. Although, maybe they're just really cheap and don't want to spend money on security upgrades. You know what they say, 'You get what you pay for!'
I'd go with D. Unanticipated increases in security incidents and threats are a glaring red flag that management isn't taking security seriously enough.
I believe C) variances against regulatory requirements also shows weak management commitment. It indicates a disregard for compliance and security standards.
I'm not sure, all the options seem like they could indicate weak management commitment. But I guess A is the best example since it's a root cause issue.
Carry
2 hours agoDaniela
5 days agoRory
13 days agoNoel
13 days agoNichelle
15 days agoJoni
18 days agoDannie
19 days ago