Which must bear the primary responsibility for determining the level of protection needed for
information systems resources?

A.
IS security specialists

B.
Senior Management

C.
Seniors security analysts

D.
system auditors