________ are descriptions of what the best firms in the industry are doing about security.

• A. Best practices
• B. Recommended practices
• C. Both A and B
• D. Neither A nor B

Answer: (A)

Best practices are established, proven methods that reflect what the leading organizations actually implement to protect their systems. When a description talks about what the best firms in the industry are doing about security, it is naming these best practices—the standard approaches regarded as most effective and commonly adopted as benchmarks. They come from industry experience, standards bodies, and real-world outcomes, guiding others to achieve a similar level of security. While recommended practices are helpful guidelines, they aren’t necessarily the proven, real-world techniques used by top firms, so the statement aligns with best practices.