The factors that require a firm to change its security planning, protection, and response are called driving forces.

• A. True
• B. False
• C. Not necessarily
• D. Optional considerations

Answer: (A)

Driving forces are the factors that compel a security program to be updated. When regulatory requirements change, new threats emerge, business operations shift (such as mergers, new locations, or changes in processes), or new technologies are adopted, these forces push you to rethink and reinforce planning, protections, and incident response. Because these factors demand action and adjustments to how security is planned and executed, they are indeed driving forces.

So the statement is true: these influencing factors require the organization to change its security planning, protection, and response.