Security systems should not be integrated into an organization's computer network unless the organization can ______ the systems both physically and technically, against deliberate or accidental compromise.

Security systems should not be integrated into an organization's computer network unless the organization can ______ the systems both physically and technically, against deliberate or accidental compromise.

• A. Clearly secure
• B. Dramatically upgrade
• C. Reduce access
• D. Isolate

Answer: (A)

The key idea is to ensure that security devices are verifiably protected before they’re connected to the network. If you can demonstrate clear security for the systems both physically and technically, you reduce the risk that someone could tamper with the hardware, disable the alarms, or intercept and alter data. Physical protection means tamper-resistant enclosures, restricted access, and defenses against environmental threats. Technical protection covers strong authentication, encryption of communications, secure software and firmware, regular patching, and solid configuration and monitoring practices. Without this baseline, integrating these systems can create a weak link that compromises the entire security posture, since attackers could exploit either hardware tampering or software vulnerabilities to undermine networked protections. The other options don’t address the necessary prerequisite: upgrading dramatically isn’t required up front; reducing access is part of broader controls but not the readiness condition; isolating would defeat the purpose of integration.

The key idea is to ensure that security devices are verifiably protected before they’re connected to the network. If you can demonstrate clear security for the systems both physically and technically, you reduce the risk that someone could tamper with the hardware, disable the alarms, or intercept and alter data. Physical protection means tamper-resistant enclosures, restricted access, and defenses against environmental threats. Technical protection covers strong authentication, encryption of communications, secure software and firmware, regular patching, and solid configuration and monitoring practices. Without this baseline, integrating these systems can create a weak link that compromises the entire security posture, since attackers could exploit either hardware tampering or software vulnerabilities to undermine networked protections. The other options don’t address the necessary prerequisite: upgrading dramatically isn’t required up front; reducing access is part of broader controls but not the readiness condition; isolating would defeat the purpose of integration.