Which term describes the factors that require a firm to change its security planning?

• A. Driving forces
• B. Risk factors
• C. Compliance triggers
• D. Market conditions

Answer: (A)

Driving forces are the factors that push a firm to change its security planning. These are the pressures and changes in the environment—such as evolving threats, new regulations, shifts in business goals, or advances in technology—that compel updates to security measures, risk assessments, and incident response plans. This term best captures why a security program must evolve. Risk factors describe potential threats or vulnerabilities themselves, not the overall push to revise the plan. Compliance triggers refer to meeting specific regulatory requirements, and market conditions describe external economic factors that influence strategy but don’t by themselves define the need to update security planning.