CISM Certified Information Security Manager – Question0754

An organization has implemented an enhanced password policy for business applications which requires significantly more business unit resource to support clients. The BEST approach to obtain the support of business unit management would be to:

A.
present an analysis of the cost and benefit of the changes
B. discuss the risk and impact of security incidents if not implemented
C. present industry benchmarking results to business units
D. elaborate on the positive impact to information security

Correct Answer: B