Certified in Risk and Information Systems Control (CRISC) — Question 1318

You are the risk official in Techmart Inc. You are asked to perform risk assessment on the impact of losing a server. For this assessment you need to calculate monetary value of the server. On which of the following bases do you calculate monetary value?

Answer options

• A. Cost to obtain replacement
• B. Original cost to acquire
• C. Annual loss expectancy
• D. Cost of software stored

Correct answer: A

Explanation

The correct answer is A, as the cost to obtain a replacement reflects the current market conditions and the actual expenses needed to restore the server's functionality. The original cost to acquire (B) may not account for depreciation, while annual loss expectancy (C) focuses on potential future losses rather than immediate replacement costs. Option D, the cost of software stored, is not relevant to the server's monetary value itself.