CISA Certified Information Systems Auditor – Question2092

Which of the following would provide the BEST justification for a new information security investment?

A.
Defined key performance indicators (KPIs)
B. Projected reduction in risk
C. Results of a comprehensive threat analysis
D. Senior management involvement in project prioritization

Correct Answer: C