Nctech Task 1( b) Security layers

Hello

(b) Draft a briefing paper to the board that evaluates the four security layers in NCTech’s IT
security manual and recommends any further security controls that should be put in
place to minimise the risk of a future data breach.

This seems a straight forward quetsion and easy to answer but the trick which I faced when I compared my answer to the model answer.

The model answer always relate the answer to the case by saying because the breach has happen it seem that the security layer was not properly working.

Wherase in my answer even I was evaluating the current layers and recommending new ones like there should be a cyber security system but I was not relating to what has happened in the data breaches.

So from the qustion it is not understood that I have to refer to the case and what has happend of the data breaches .

So Can I say that even if the qusetion has not said that I should think about what breaches happened I have to always answer any quetion in SBL by linking it to the case even if the question was not pointing out to that.

Thanks.