ISOISO 27001Risk Assessment and TreatmentEASYFree question

An organization weighs the cost of implementing controls against the reduction in potential loss when deciding which risks to treat first. Which decision-support technique does this reflect?

A.Vulnerability scanning
B.Root cause analysis of incidents
C.Business impact analysis for continuity only
D.Cost-benefit analysis to prioritize treatments

Why D is correct

Cost-benefit analysis compares the expense of a control against the expected reduction in risk, helping prioritize treatments that deliver the greatest risk reduction per unit of cost. It is a common input to treatment prioritization.

Know someone studying for ISO 27001? Send them this one.

ISO 27001 and ISO are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by ISO or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.

An organization weighs the cost of implementing controls against the reduction in potential loss when deciding which risks to treat first. Which decision-support technique does this reflect?

Where this fits in the ISO 27001 exam

One question down. Thousands to go.

An organization weighs the cost of implementing controls against the reduction in potential loss when deciding which risks to treat first. Which decision-support technique does this reflect?

Where this fits in the ISO 27001 exam

More free Risk Assessment and Treatment questions

One question down. Thousands to go.