Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Estimated savings from reduced risk exposure translate technical risk information into business terms (cost-benefit),
B. Risk management decisions require business-oriented information that helps management compare the cost of treatment with the expected reduction in loss. Estimated savings from reduced exposure directly supports cost-benefit analysis and investment decisions
Threat modeling = What could happen and how? Risk decision-making = What is the business exposure, and what should we do about it? B is strongest because it translates security risk into business decision value.