Which of the following is a correct statement about the balance among prevention, detection, and response (PDR) ? Organizations have no discretion in deciding their levels of security practice. If detection and response measures are in place, it is not necessary to have measures devoted to prevention. If preventive measures are in place, it is not necessary to have measures focused on detection and response. The greater the sensitivity and quantity of the data at issue, the more carefully the balance among these three must be evaluated.

The greater the sensitivity and quantity of the data at issue, the more carefully the balance among these three must be evaluated.

Explanation:

A balanced security security strategy involves balancing prevention, detection and response factors. This means that some vulnerabilities can be set aside to focus more on incident detection and response. This is because it is virtually impossible to prevent any and all threats, so security leaders need to invest in a security strategy that maintains the balance between prevention, detection and response, where these three aspects play essential roles in protecting corporate assets and minimize risks to the business.

Regarding this balance, we can state that the greater the sensitivity and quantity of the data in question, the more carefully the balance between these three will be evaluated.