Exam 712-50 topic 1 question 35 discussion

Assumption of breach, means the event is post asset protection and controls, how to handle breach, assurance, investigation and incident retainers are the ways to handle assume breach.

Under Assumption of breach not a single insurance company will sing a contract

The "assumption of breach" model operates on the premise that breaches are inevitable. Therefore, it's crucial to prioritize and focus security efforts on protecting high-value assets, as these are the most critical and potentially damaging if compromised. This approach helps in allocating resources efficiently to areas that matter the most, ensuring that the organization's most valuable and sensitive information is adequately protected.

i honestly would pick none of the answers. Focus on most critical assets can't be the right answer, that would leave other assets vulnerable. Transferring risk to an insurance company? that might compensate some costs, but will NOT protect your company getting hit by a severe attack...and fines in case of regulations. My thoughts here are to harden the incident response process, implement a stronger process and tech, implement network segreration and strong IAM to limit the damage and potential lateral movement. Thats the theority everyone gets a victim of an attack..the difference is the severity and capability to stop bleeding..

the "assumption of a breach" require an insurance for the compliance liability

We should be thinking quantitatively, we know that there is or will be a breach. Insurance is a must for us. However, we do not know which assets. Correct one is B

If there is a breach, the organization will prioritize the security efforts on high value assets. It is too late to have insurance and you may not have enough resource to put on all assets as well.

It is about assumption that we have already a breach, at this point we need to remediate the risk of Regulatory or compliance fines and paneities. Hence Answer B is correct.

B is correct, I checked on two other websites

Answer is C. Focus your security efforts on high value assets

Answer is C.

Focus your security efforts on high value assets