Certified Information Systems Security Professional CISSP · Free Practice Question Medium
Question 88
As we prepare for budget season, our management team is considering allocating additional resources toward improving ThorTeaches.com's security measures. In order to make an informed decision, we need to understand the financial impact of a potential security breach. What is a common method for calculating the financial impact of a security breach on an organization?
- A Annual loss expectancy
- B Net present value
- C Annualized rate of return
- D Return on investment
Reveal correct answer
Correct answer: A
Explanation
The correct answer: Annual loss expectancy (ALE) is a commonly used method for calculating the financial impact of a security breach on an organization. It takes into account the likelihood of the breach occurring and the potential cost of the breach, such as lost revenue, remediation costs, legal fees, and reputational damage. By multiplying the likelihood of the breach by the cost of the breach, organizations can determine their expected financial losses from a security breach in a given year. The incorrect answers: Annualized rate of return is a measure of the annual return on an investment, such as a stock or bond. It does not take into account the likelihood or cost of a security breach, so it is not a suitable method for calculating the financial impact of a security breach on an organization. Net present value is a method used in capital budgeting to analyze the profitability of an investment or project. It calculates the present value of cash inflows minus the present value of cash outflows over a period of time. While NPV might be useful in assessing the value of investing in certain security measures, it does not directly calculate the potential financial impact of a security breach. Return on investment is a measure of the profitability of an investment, calculated as the ratio of the net profit to the cost of the investment. In terms of security measures, ROI could be used to assess the financial effectiveness of security investments in preventing breaches. However, it's not a method for calculating the financial impact of a security breach itself.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
