To specify security requirements, one should identify the risks that are to be dealt with ?

To specify security requirements, one should identify the risks that are to be dealt with ?

A. True
B. False

Explanation: To specify security requirements, one should identify the assets that are to be dealt with.