CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ957

Information Security Risk Management

Which of the following is MOST important when determining how an information security budget should be allocated?

  • A Business impact assessment
  • B Regulatory compliance standards
  • C Information security strategy
  • D Information security policy
Explanation

A business impact assessment identifies the operational and financial consequences of disruptions to business processes. It enables security funding to be prioritized for the assets, services, and controls whose failure would have the greatest business impact.

Community Discussion

No comments yet. Be the first to start the discussion!