Which of the following is the MOST important consideration when investing in information security improvement initiatives?

The correct answer is A. Risk appetite. The most important consideration when investing in information security improvement initiatives is the organization's risk appetite. Risk appetite defines the level of risk the organization is willing to accept, guiding which security improvements are prioritized and how resource

Submitted by katya_ua· Apr 18, 2026Information Security Governance

Question

Options

ARisk appetite
BImplementation cost
CThreat assessment
DEase of deployment

How the community answered

(42 responses)

A
88% (37)
B
2% (1)
C
7% (3)
D
2% (1)

Explanation

The most important consideration when investing in information security improvement initiatives is the organization's risk appetite. Risk appetite defines the level of risk the organization is willing to accept, guiding which security improvements are prioritized and how resources are allocated to mitigate risks effectively.

Topics

#Risk Appetite#Security Investment#Information Security Governance#Strategic Decision Making

Community Discussion

No community discussion yet for this question.

Full CISM Practice