CISSP – Information Systems Security Management Professional (ISSMP) — Question 30

Which of the following analysis provides a foundation for measuring investment of time, money and human resources required to achieve a particular outcome?

Answer options

• A. Vulnerability analysis
• B. Cost-benefit analysis
• C. Gap analysis
• D. Requirement analysis

Correct answer: C

Explanation

The correct answer is C, as Gap analysis identifies the differences between current performance and desired outcomes, allowing for the evaluation of necessary investments. Options A, B, and D do not focus specifically on measuring the investment required for achieving outcomes, making them less relevant in this context.