A security engineer is attempting to justify a large investment in security IT infrastructure. The business has a
limited budget and is reluctant to invest. Which of the following should the business consider in the analysis?


A. Loss of revenue in case of a breach
B. Difficulty of integration
C. Training involved for IT staff and users
D. Amount of equipment that will be replaced