Integrated defense represents two fundamental changes to policy and procedures. What is the first change?

• A. From Risk Based to Resource Based
• B. From Resource Based to Risk Based
• C. From Compliance Based to Enforcement Based
• D. From Threat Based to Vulnerability Based

Answer: (B)

In integrated defense, decisions about where to invest and how to deploy assets are guided by risk, not by how much resource you have. The first change is moving from a resource-based approach to a risk-based approach. This means priorities and allocations are set by the likelihood and potential impact of threats, so the most significant risks get attention first, even if that means rebalancing funding or personnel away from less critical areas. For example, if the assessed risk of cyber attacks is higher than physical threats, resources go toward cyber defense earlier rather than sticking with a fixed, resource-driven plan. The shift toward risk-based planning lays the groundwork for the broader transformation, with other changes following as risk assessments and enforcement-focused actions evolve.