Certified Information Security Manager (CISM) — Question 995

The business value of an information asset is derived from:

Answer options

• A. its replacement cost.
• B. its criticality.
• C. the threat profile.
• D. the risk assessment.

Correct answer: B

Explanation

The correct answer is B, as the criticality of an information asset directly impacts its value to the business. Options A, C, and D are related to cost, threats, and risk evaluation but do not directly reflect how the importance of the asset contributes to its overall business value.