CISA Certified Information Systems Auditor – Question0481

A PRIMARY advantage of involving business management in evaluating and managing information security risks is that they:

A.
better understand the security architecture
B. better understand organizational risks
C. can balance technical and business risks
D. are more objective than security management

Correct Answer: C