CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ71

Information Security Risk Management

Which of the following is MOST important to consider when establishing an asset’s value?

  • A Potential business loss
  • B Asset classification level
  • C Asset recovery cost
  • D Cost of insurance premiums
Explanation

Asset value should reflect the potential business loss resulting from compromise, loss, or unavailability, including operational, financial, legal, and reputational effects. Recovery expense is only one possible component of that broader loss.

Community Discussion

No comments yet. Be the first to start the discussion!