Discuss Isaca CGEIT Exam Topic 9 Question 31

When deciding to develop a system with sensitive data, which of the following is MOST important to include in a business case?

AA risk assessment to determine the appropriate controls

BUpdated enterprise architecture (EA)

CSkills gap analysis

DThe additional cost of encrypting sensitive data

Suggested Answer: D

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Shawna 11 months ago

Skills gap analysis? Seems a bit off for sensitive data systems.

Izetta 12 months ago

A is the way to go, no doubt about it!

Alline 12 months ago

Wait, are we really prioritizing costs over security?

Maybelle 12 months ago

I think B is just as important for overall structure.

Candida 1 year ago

Definitely A, risk assessments are crucial!

Craig 1 year ago

Skills gap analysis seems less relevant to me in this context, but I guess it could be important if we don't have the right people to manage sensitive data.

Skye 1 year ago

I recall a similar question where we discussed the importance of encryption costs, but I wonder if that's the most critical factor here.

Yuki 1 year ago

I'm not entirely sure, but I feel like updated enterprise architecture might be important too. It could help align the system with business goals.

Thomasena 1 year ago

I think a risk assessment is crucial because it helps identify what controls we need for sensitive data. I remember practicing a question about risk management.

Kendra 1 year ago

I'm a bit confused by this question. None of the options seem like a clear-cut solution. I'll need to do some additional research to determine the best way to approach this.

Clarinda 1 year ago

Okay, I think I've got this. OCSP does introduce some network latency because it checks certificates one at a time. So the statement is true.

Elvera 1 year ago

I have this nagging feeling that option D could be correct since it seems like all of them contribute to discoverability in some way.

Thad 1 year ago

The Gross Happiness index sounds interesting, but I'm not familiar with that. I'll have to look into it more to see if it's a good fit for this scenario.

Isaca CGEIT Exam - Topic 9 Question 31 Discussion