Organizational Transformation requires understanding not only security threats and capabilities but also a deep understanding of the business environment & organizational goals.

• A. Organizational Transformation
• B. Understanding the business
• C. Verizon Data Breach Investigations Report
• D. 30/60/90

Answer: (A)

Organizational Transformation is the idea being tested. It stresses that secure work isn’t just about identifying threats and building technical capabilities; it requires a deep understanding of the business environment and organizational goals to guide security decisions, priorities, and investments. When security is aligned with business strategy, risk management, and regulatory needs, the transformation delivers real value and enables the organization to achieve its objectives.

The other items don’t capture the full concept: understanding the business is just a component, the Verizon Data Breach Investigations Report is a data source about incidents, and a 30/60/90 plan is a planning horizon—none describe the integrated, strategic change implied by organizational transformation.