Which of the following correctly describes the relationship between information sensitivity and security testing?