Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CRISC Exam - Topic 11 Question 5 Discussion

What is the BEST information to present to business control owners when justifying costs related to controls?
D) Return on IT security-related investments
A) Loss event frequency and magnitude
B) The previous year's budget and actuals
C) Industry benchmarks and standards

Isaca CRISC Exam - Topic 11 Question 5 Discussion

Actual exam question for Isaca's CRISC exam
Question #: 5
Topic #: 11
[All CRISC Questions]

What is the BEST information to present to business control owners when justifying costs related to controls?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Billye at May 06, 2022, 05:06 AM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Fatima
8 months ago
I disagree, benchmarks give a better context for costs.
upvoted 0 times
...
Chaya
9 months ago
Surprised that budget actuals aren't the top choice.
upvoted 0 times
...
Roxane
9 months ago
Return on IT security investments is crucial too!
upvoted 0 times
...
Vashti
9 months ago
I think industry benchmarks are more relevant.
upvoted 0 times
...
Noelia
9 months ago
Definitely loss event frequency and magnitude!
upvoted 0 times
...
Royal
9 months ago
The previous year's budget and actuals seem relevant, but I think they might not capture the full picture of current risks and costs.
upvoted 0 times
...
Fletcher
9 months ago
I remember practicing a question about justifying costs, and I think industry benchmarks could be useful too, but they might not be as specific to our situation.
upvoted 0 times
...
Erick
9 months ago
I think loss event frequency and magnitude might be the best choice since it directly relates to risk assessment, but I'm not entirely sure.
upvoted 0 times
...
Brett
9 months ago
I feel like return on IT security-related investments is important, but I wonder if it’s the most compelling data for control owners.
upvoted 0 times
...
Veronika
9 months ago
D seems like the most straightforward answer that matches the description in the question. I'm going to go with that unless I can come up with a really compelling reason why one of the other options might be better.
upvoted 0 times
...
Cristal
9 months ago
Okay, let me see here. I know a Virtual P3O model is about having a centralized portfolio management function, so I'm guessing the key is having the right processes and standards in place. I'll go with B.
upvoted 0 times
...
Diego
10 months ago
Ah, I see now. Option B looks like the way to go - using the -o flag to set the mountpoint and compression properties when creating the new file system.
upvoted 0 times
...

Save Cancel