In System Security Planning, which sentence is False?

Question $2$ options:

It is possible for a system to be compromised during the installation before its patches are installed

The goal is to maximize security while minimizing costs

Planning process needs to determine security requirements for the system, applications, data, etc.

In planning process, security requirements for the users are not considered.