Which of the following is a correct statement about the balance among prevention, detection, and response (PDR)? The greater the sensitivity and quantity of the data at issue, the more carefully the balance among these three must be evaluated. Organizations have no discretion in deciding their levels of security practice. If detection and response measures are in place, it is not necessary to have measures devoted to prevention. If preventive measures are in place, it is not necessary to have measures focused on detection and response.

The correct answer is letter "A": The greater the sensitivity and quantity of the data at issue, the more carefully the balance among these three must be evaluated.

Explanation:

The Information Security Process aims to provide entities a tool to anticipate risks, face threats and mitigate attacks. This process includes three steps:

Firms must find ways to set up their PDR processes in a way that the three of them have the same strength. Companies storing sensitive customers' information must weigh the importance of the three steps in a way that they decrease the possibilities of an intrusion.

where is the graph?

there's 11 people for the 1st position. then, no matter who gets it, there's only 10 left for the second, and then 9 left for the third. 11 x 10 x 9 = 990.   the answer is there are 990 different ways the positions can be filled by these applicants