The only use of the acceptance strategy that is recognized as valid by industry practices occurs when the organization has done all but which of the following?
A. determined the level of risk posed to the information asset
B. performed a thorough cost-benefit analysis
C. determined that the costs to control the risk to an information asset are much lower than the benefit gained from the information asset
D. assessed the probability of attack and the likelihood of a successful exploitation of a vulnerability
Answer: C
Computer Science & Information Technology
You might also like to view...
A measure of how well a calculated trend line fits the source data is called the coefficient of determination or ________ value
Fill in the blank(s) with correct word
Computer Science & Information Technology
Data that is manually calculated and typed into a spreadsheet is called ________ data
Fill in the blank(s) with the appropriate word(s).
Computer Science & Information Technology