QuestionQ38Verified/Information Security Risk ManagementCopy linkReport a problemAsk AstroTutorSave questionMitigation of technology risks to acceptable levels should be based primarily on:Abusiness process requirements.Bbusiness process reengineering.Clegal and regulatory requirements.Dinformation security budget.Show AnswerAnswerExplanationTechnology risk treatment is driven primarily by business process requirements, since acceptable risk levels depend on the potential effect on business operations, objectives, and required outcomes. Legal and regulatory obligations are important compliance considerations within that business context.Show comments3Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion