MENU
What is the BEST information to present to business control owners when justifying costs related to controls?
Suggested Answer: D
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
FA
Fatima
11 months ago
I disagree, benchmarks give a better context for costs.
CH
Chaya
12 months ago
Surprised that budget actuals aren't the top choice.
RO
Roxane
12 months ago
Return on IT security investments is crucial too!
VA
Vashti
12 months ago
I think industry benchmarks are more relevant.
NO
Noelia
1 year ago
Definitely loss event frequency and magnitude!
RO
Royal
1 year ago
The previous year's budget and actuals seem relevant, but I think they might not capture the full picture of current risks and costs.
FL
Fletcher
1 year ago
I remember practicing a question about justifying costs, and I think industry benchmarks could be useful too, but they might not be as specific to our situation.
ER
Erick
1 year ago
I think loss event frequency and magnitude might be the best choice since it directly relates to risk assessment, but I'm not entirely sure.
BR
Brett
1 year ago
I feel like return on IT security-related investments is important, but I wonder if it’s the most compelling data for control owners.
VE
Veronika
1 year ago
D seems like the most straightforward answer that matches the description in the question. I'm going to go with that unless I can come up with a really compelling reason why one of the other options might be better.
CR
Cristal
1 year ago
Okay, let me see here. I know a Virtual P3O model is about having a centralized portfolio management function, so I'm guessing the key is having the right processes and standards in place. I'll go with B.
DI
Diego
1 year ago
Ah, I see now. Option B looks like the way to go - using the -o flag to set the mountpoint and compression properties when creating the new file system.