CISA Certified Information Systems Auditor – Question0781

A risk analysis for a new system is being performed. For which of the following is business knowledge MORE important than IT knowledge?

A.
Vulnerability analysis
B. Cost-benefit analysis
C. Impact analysis
D. Balanced scorecard

Correct Answer: B