CGEIT: Certified in the Governance of Enterprise ITDemo

Question

When determining whether to develop a system containing sensitive data, which of the following is MOST important to include in the business case?

A A risk assessment to determine the appropriate controls
B Updated enterprise architecture (EA)
C The additional cost of encrypting sensitive data
D Skills gap analysis

Explanation

A risk assessment identifies threats, vulnerabilities, potential impacts, and the controls required to protect sensitive data. It provides the foundation for making an informed business decision and for determining related requirements such as encryption costs, architecture changes, and needed skills.

CGEIT: Certified in the Governance of Enterprise ITDemo

AstroTutor

Notes

Readiness

QuestionQ430

Community Discussion