IT Risk Fundamentals

A business case for a risk response must justify that the cost of the proposed investment is warranted by the expected reduction in risk exposure or avoidance of loss. This cost-benefit rationale supports an informed decision on whether to fund the response.