Security professionals should minimize burdens on functional departments.

• A. True
• B. False
• C. Sometimes
• D. Not sure

Answer: (A)

Minimizing burdens on those who run the business is essential because security works best when it enables workflow, not obstructs it. When security controls are intrusive or poorly integrated, teams push back, find workarounds, or abandon secure practices altogether, which actually increases risk. A practical approach is to apply security in a risk-based, integrated way: protect the most critical assets, automate where possible, design controls into processes, and provide user-friendly options (like convenient authentication or self-service recovery). By reducing friction and making security a seamless part of daily operations, adoption improves, incidents drop, and overall risk decreases. That’s why this mindset is the best fit.