Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
In practice the manager identifies the highest-priority capability gaps, estimates the residual risk they create, calculates the expected benefit of closing them, and presents a concise business case.
The question starts with the company is not having the budget, so ROI discussions are in- intangible. Instead, the audit findings are real and should be addressed as a priority.
I go with C as with known budget constraints the first step would be recommendations..ROI is very specific for just a tool maybe