During the development of the enterprise security program,there is always a set of business requirements that must be met.Management is going to have a long list of expectations.Which of the following would be the most important expectation that the security team must always meet?

Understand what risk is present and reduce that risk to an acceptable level.

Security should never get in the way of productivity

Security should always be built in to any system out of the box

Business priorities,as defined by management,should always be considered first on the list prior to risk $,$avvailable resources and or legislation correct answer for this mcq