Exam CISM topic 1 question 742 discussion

The correct answer is C. Business case. A business case is the best way to demonstrate the return on investment (ROI) for an information security initiative. A business case typically includes a cost-benefit analysis that compares the costs of implementing a security initiative with the benefits that are expected to be gained, such as reduced risk, improved compliance, or increased operational efficiency. This type of analysis helps to justify the investment in the security initiative by demonstrating the financial and strategic benefits that are expected to be achieved. A business case can be used to convince decision-makers to invest in the initiative, based on a clear and compelling argument for the expected return on investment.

C. Business case The best demonstration of return on investment (ROI) for an information security initiative is through a business case. A business case outlines the financial benefits, costs, and potential risks associated with the initiative. It typically includes a detailed analysis of how the initiative will provide value to the organization, including factors such as reduced security breaches, improved compliance, cost savings, and increased revenue or customer trust.

C. Business case