RAMs should increase in response to changes in threat level. Which option best states this?

• A. RAMs should increase as threat increases.
• B. RAMs should decrease when threat increases.
• C. RAMs should never change once implemented.
• D. RAMs are independent of threat levels.

Answer: (A)

RAMs are the protective actions and resources allocated to security. The core idea here is that protection should adjust to risk: as threat levels rise, you strengthen defenses to keep risk at an acceptable level. Increasing RAMs when threats increase enhances detection, response, and resilience, ensuring protection keeps pace with danger. If threat goes up but RAMs stay the same or drop, gaps appear and risk grows. If RAMs are fixed or unrelated to threat, they won’t match the actual risk. So the statement that RAMs should increase as threat increases is the most appropriate approach.