In the context of protecting information resources, it is easy to conduct a cost-benefit justification for controls before an attack occurs because it is easy to assess the impact of a hypothetical attack.

Question

Quizplus · Accepted Answer

It is difficult to accurately assess the impact of a hypothetical attack and the cost of implementing controls may outweigh the potential benefit until an actual risk assessment is conducted.

In the Context of Protecting Information Resources, It Is Easy