ISACA Advanced in AI Security Management Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C2

  Reasoning: In ISACA risk management frameworks, the ultimate justification for any security or compliance decision is based on risk appetite. If an organization performs a formal risk assessment and determines that the potential legal, financial, or reputational impact of noncompliance falls within its pre-defined acceptable risk levels, that serves as the primary justification for the decision. Other options (like industry use or lack of cost determination) are not formal risk management justifications.