ExamGecko
Question list
Search
Search

Question 29 - NIST-COBIT-2019 discussion

Report
Export

Which of the following is a PRIMARY input into Steps 2 and 3: Orient and Create a Current Profile?

A.

Evaluating business cases

Answers
A.

Evaluating business cases

B.

Updating business cases

Answers
B.

Updating business cases

C.

Defining business cases

Answers
C.

Defining business cases

Suggested answer: C

Explanation:

Defining business cases is a primary input into Steps 2 and 3: Orient and Create a Current Profile, because it involves identifying the business drivers, mission, objectives, and risk appetite of the organization, as well as the scope and boundaries of the cybersecurity program12. A business case is a document that provides the rationale and justification for initiating a cybersecurity project or program, and describes the expected benefits, costs, risks, and alternatives34.

asked 18/11/2024
juan otero
28 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first