CCISO risk management principles state that controls must be cost-effective. Spending more to protect an asset than the asset’s value violates basic risk management economics.
Therefore, control cost should be less than the value of the asset, making option C correct.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit