Certified Chief Information Security Officer (CCISO) — Question 54

What is the BEST reason for having a formal request for proposal process?

Answer options

• A. Creates a timeline for purchasing and budgeting
• B. Informs suppliers a company is going to make a purchase
• C. Clearly identifies risks and benefits before funding is spent
• D. Allows small companies to compete with larger companies

Correct answer: C

Explanation

The correct answer is C because a formal request for proposal process helps organizations assess potential risks and benefits thoroughly before committing funds. Options A and B, while important, do not primarily focus on risk and benefit assessment. Option D highlights competition but does not address the core purpose of the RFP process.