When deciding about the amount of funds to allocate to IS security, which of the following is the recommended approach?

Group of answer choices

Minimize the amount of funds spent on IS security, deal with security incidents when they occur.

Inimize the inconvenience caused to users because of measures, such as dual factor authentication.

Balance the cost of the security measures $($technology etc.$)$ with the anticipated costs of a security failure.

Spend what it takes to minimize the costs of a security failure.