CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ19

VerifiedInformation Security Risk Management

An information security manager recommends investing in a new security initiative to address recently published threats. Which of the following is MOST important to include in the business case?

Explanation

The potential impact if a threat materializes quantifies the business risk the initiative is intended to reduce, providing the core justification for the investment and its priority.

Community Discussion

No comments yet. Be the first to start the discussion!