CISM Information Security Governance Practice Question

Which TWO factors are most important when prioritizing security investments? (Select TWO.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The level of risk reduction achieved

Risk reduction and alignment with business strategy ensure investments address the most critical needs and support organizational goals.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The ease of implementation
Why it's wrong here
Ease is a secondary consideration.
✓
The level of risk reduction achieved
Why this is correct
Risk reduction directly impacts security posture.
✓
Alignment with business objectives and strategy
Why this is correct
Alignment ensures investment supports business goals.
✗
The cost of the security solution
Why it's wrong here
Cost is a consideration but not the most important factor.
✗
The popularity of the solution in the industry
Why it's wrong here
Popularity does not guarantee effectiveness or value.

Go deeper