CompTIA Security+ (SY0-701) SY0-701 — Question 504

Which of the following would be the greatest concern for a company that is aware of the consequences of non-compliance with government regulations?