The use of a business case to obtain funding for an information security investment is MOST effective when the business case:
relates the investment to the organization's strategic plan.
translates information security policies and standards into business requirements.
articulates management's intent and information security directives in clear language.
realigns information security objectives to organizational strategy.
Submit