CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ48

Information Security Risk Management

Which of the following would BEST justify expenditure on a compensating control?

  • A Root cause analysis
  • B Emerging risk trends
  • C Vulnerability assessment
  • D Risk analysis
Explanation

A risk analysis establishes the likelihood and impact of the relevant threat or vulnerability and supports the business case for an alternative control by demonstrating that its cost is appropriate for the risk reduction achieved.

Community Discussion

No comments yet. Be the first to start the discussion!