Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Why B is correct A business case needs a clear justification for the investment. For a new Intrusion Detection System (IDS), that might include gaps in threat detection, insufficient network visibility, or an inability to identify suspicious activity promptly. Defining the issue establishes the business need and gives you a basis for evaluating potential solutions. Why the other options come later A. Calculate total cost of ownership (TCO): Determine the full cost of the solution, including implementation, licensing, maintenance, and staffing. C. Perform a cost-benefit analysis: Compare expected benefits with the costs once the problem and proposed solution are understood. D. Conduct a feasibility study: Evaluate whether the proposed solution is practical and achievable.
CISM mindset: For "business case" questions, think in this sequence: Identify the business problem or issue. ✅ Determine business requirements. Identify possible solutions. Assess feasibility. Analyze costs and benefits (including TCO). Recommend the preferred solution. you can't evaluate benefits until you've first identified the problem the solution is intended to solve.
C makes more sense than B.