An organization is considering a new detection tool. Which consideration best reflects the course material?

### Why this is right Every new tool uses organizational time, attention, and operational capacity. Its value should be considered against the risk reduction it provides. ### The concept Security capabilities are not cost-free simply because they are technical. Staff must operate tools, interpret outputs, and fit them into existing work. A careful decision weighs the expected benefit against these demands rather than assuming that adding another product automatically improves outcomes. ### The other options - **B. Adopt it because more tools always produce better security.** More tools can consume capacity without providing enough additional value. - **C. Reject it unless it can automate every response decision.** Complete automation is neither realistic nor the stated goal. - **D. Evaluate only its purchase price and ignore operational effort.** This omits the time, attention, and capacity costs highlighted in the material. ### Terms - **Risk reduction**: A decrease in the likelihood or impact of security harm. ### Remember Assess the tool's operational burden as well as its security benefit.