Vulnerability analysis results indicate that a critical software platform needs to be upgraded. Which of the following is the BEST way to obtain investment for the upgrade?

The correct answer is D. Prepare a business case. The best way to obtain investment for a critical software platform upgrade is to prepare a business case. A business case outlines the justification for the upgrade, including costs, benefits, risk mitigation, and how it aligns with organizational goals. It helps senior…

Submitted by salim_om· Apr 18, 2026Information Security Program Development and Management

Question

Options

APerform a threat assessment.
BPresent a gap analysis report.
CDevelop security risk scenarios.
DPrepare a business case.

How the community answered

(58 responses)

A
7% (4)
B
12% (7)
C
3% (2)
D
78% (45)

Explanation

The best way to obtain investment for a critical software platform upgrade is to prepare a business case. A business case outlines the justification for the upgrade, including costs, benefits, risk mitigation, and how it aligns with organizational goals. It helps senior management understand the need for the upgrade in terms of business value, financial impact, and potential risk reduction. While threat assessments, gap analysis reports, and security risk scenarios provide valuable technical insights, a business case communicates the strategic and financial necessity to secure investment.

Topics

#Business Case#Investment Justification#Security Funding#Resource Allocation

Community Discussion

No community discussion yet for this question.

Full CISM Practice