Certified in Risk and Information Systems Control (CRISC) — Question 887

What is the BEST information to present to business risk owners when justifying costs related to controls?

Answer options

• A. Compliance with security policy
• B. The previous year's budget and actuals
• C. Industry benchmarks
• D. Loss event frequency and magnitude

Correct answer: D

Explanation

The correct answer is D because presenting loss event frequency and magnitude demonstrates the potential financial impact of risks, making a compelling case for the costs associated with controls. The other options, while relevant, do not directly relate to the financial justification of control costs in the same impactful manner.