If the hospital's IT group wants to err on the side of safety, they will start with the assumption that the software does not provide enough protection. Which of the following best describes this as a null hypothesis:

The software is not enough to protect against all possible attempts to break into the database.

The software is enough to protect against all possible attempts to break into the database.

The software is not enough to protect against all of the attempts conducted by the IT group in the study.

The software is enough to protect against all of the attempts conducted by the IT group in the study.