The key to security being an enabler is ________.

• A. getting it involved early within the project
• B. having strong corporate policies
• C. extensive training
• D. adequate spending on security

Answer: (A)

Security becomes an enabler when it’s brought into the project from the start. Involving security early means threat modeling, risk assessment, and appropriate controls are considered during architecture, design, and initial development rather than tacked on later. This shift-left approach helps you bake secure-by-design decisions into how the system is built, which reduces costly rework, avoids delays from late fixes, and keeps security aligned with business goals. When security is part of the planning and design phase, you can trade-offs intelligently—balancing risk with innovation and time-to-market.

While strong policies, thorough training, and adequate spending are all valuable, they don’t by themselves guarantee that security will enable the project. Policies set expectations but may be slow to adapt to concrete designs; training raises awareness but may not prevent design-level vulnerabilities if security isn’t integrated early; spending is essential but only effective if security considerations are incorporated from the outset and guide decisions throughout development.