Which of the following leads to the best optimal return on security investment?
1) Deploying maximum security protection across all the information assets
2) Focusing on the most important information assets and then determining their protection
3) Deploying minimum protection across all the information assets