Which statement best describes how security posture is improved?

• A. By increasing the number of guards
• B. By reducing training
• C. By risk management, training, and technology upgrades
• D. By lowering budget

Answer: (C)

Security posture improves when an organization takes a holistic, layered approach that includes risk management, training, and technology upgrades. Risk management helps identify threats, assess vulnerabilities, and prioritize mitigations so defenses focus on the most significant risks. Training ensures people know how to act correctly, recognize threats like phishing, and follow incident response procedures. Technology upgrades provide up-to-date controls, monitoring, and automation that detect and prevent threats. Together, these elements reduce gaps across people, processes, and technology, strengthening overall security.

Focusing only on increasing guards addresses physical security but not the broader range of threats or the behaviors and systems that can still be exploited. Reducing training leaves individuals unprepared to respond to incidents or follow security procedures. Lowering the budget limits the ability to invest in people, processes, and tools, which weakens the overall security posture.