Certified in Risk and Information Systems Control (CRISC) — Question 85

What is the BEST information to present to business control owners when justifying costs related to controls?

Answer options

• A. Return on IT security-related investments
• B. The previous year's budget and actuals
• C. Industry benchmarks and standards
• D. Loss event frequency and magnitude

Correct answer: A

Explanation

Option A is correct because presenting the return on IT security-related investments helps justify costs by demonstrating the value derived from those expenditures. Options B, C, and D, while useful in their contexts, do not directly correlate to the justification of costs in terms of return on investment, making them less effective for this specific purpose.