CISM Certified Information Security Manager – Question0369 Which of the following would BEST justify spending for a compensating control? A. Threat analysis B. Risk analysis C. Peer benchmarking D. Vulnerability analysis Show Answer Hide Answer Correct Answer: B