Certified Information Systems Auditor (CISA) — Question 863

Which of the following is MOST important to include in a business case for an IT-enabled investment?

Answer options

• A. Business impact analysis (BIA)
• B. Security requirements
• C. Risk assessment
• D. Cost-benefit analysis

Correct answer: D

Explanation

The correct answer is D, as a cost-benefit analysis provides a comprehensive evaluation of the potential financial impacts of the investment, making it essential for decision-making. While options A, B, and C are important components, they do not provide the same level of financial justification that a cost-benefit analysis offers.