ISACA Certified Information Security Manager Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Cost should be concedred.

• Chose D1

  D makes more sense since this is the MOST important to start sorting the issues considering the risk and then start checking the cost of the mitigation control vs the impact.

• Chose D3

  controls are designed to mitigate risks.