Which factor drives the decision to enact immediate eradication/remediation?

• A. Availability of reliable backups.
• B. Internal pressure unrelated to data risk.
• C. Fear of losing data.
• D. Regulatory penalties.

Answer: (C)

The primary driver for enacting immediate eradication and remediation is the fear of losing data. When there’s a real risk that information could be corrupted, exfiltrated, or encrypted by an attacker, the urgency is to eliminate the threat now to protect data integrity and availability. The fact that reliable backups exist is important for recovery, but it doesn’t negate the need to act promptly—the backups inform recovery options, not the impulse to stop the attacker right away. Internal pressure unrelated to data risk doesn’t align with the actual threat landscape, and while regulatory penalties can influence decisions, they’re external consequences rather than the immediate reason to act. The strongest, most direct motivation to act quickly is concern over potential data loss.