Certified Information Security Manager (CISM) — Question 1059

Before approving the implementation of a new security solution, senior management requires a business case. Which of the following would BEST support the justification for investment?

Answer options

• A. The solution contributes to business strategy.
• B. The solution improves business risk tolerance levels.
• C. The solution reduces the cost of noncompliance with regulations.
• D. The solution improves business resiliency.

Correct answer: A

Explanation

Option A is correct as aligning the security solution with the business strategy directly supports its importance and relevance to the organization's goals. While the other options present valid benefits, they do not provide as strong a case for investment as demonstrating a contribution to the overall business strategy.