To specify security requirements, one should identify the risks that are to be dealt with ?
A. True
B. False
Explanation: To specify security requirements, one should identify the assets that are to be dealt with.