CISM Certified Information Security Manager – Question0445

A PRIMARY advantage of involving business management in evaluating and managing information security risks is that they:

A.
better understand organizational risks.
B. can balance technical and business risks.
C. are more objective than security management.
D. better understand the security architecture.

Correct Answer: B