Which of the following is NOT an alternative to cost-benefit analyses?
A) Benchmarking
B) Due care/due diligence
C) Baselining
D) ISO 17799 based controls

Question

Quizplus · Accepted Answer

ISO 17799 based controls are not an alternative to cost-benefit analyses but rather a set of security controls designed to protect information and IT assets. Benchmarking, due care/due diligence, and baselining are all alternative methods to cost-benefit analyses that organizations can use to evaluate the potential costs and benefits of a particular decision or investment. Benchmarking involves comparing the costs and benefits of a particular decision or investment to similar decisions or investments made by other organizations. Due care/due diligence refers to the process of conducting a thorough investigation of a particular decision or investment to minimize risk and maximize benefits. Baselining involves establishing a baseline or benchmark for the costs and benefits of a particular decision or investment and then periodically evaluating performance against this baseline.

Which of the Following Is NOT an Alternative to Cost-Benefit