Exam IT-Risk-Fundamentals Topic 1 Question 66 Discussion

Actual exam question for ISACA's IT-Risk-Fundamentals exam
Question #: 66
Topic #: 1
Which of the following is the PRIMARY reason to conduct a cost-benefit analysis as part of a risk response business case?

Suggested Answer: A Vote an answer

The primary reason for a cost-benefit analysis in a risk response business case is to determine whether the reduction in risk achieved by the response justifies the cost of implementing it. It's about weighing the potential benefits (reduced risk) against the costs of the response.
While determining future resource requirements (B) and calculating ROI (C) can be part of the analysis, the primary focus is on justifying the cost based on risk reduction.

by Claire at Aug 10, 2026, 06:24 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10