Isaca
CISM · Question #581
When conducting a post-implementation review for a security investment, it is MOST important to determine whether the investment:
The correct answer is D. delivers anticipated risk reduction. The most important outcome of a post-implementation review for a security investment is to verify whether it has effectively reduced the targeted risks as anticipated, which justifies the investment and aligns with security objectives.
Submitted by cyberguy42· Apr 18, 2026Information Security Risk Management
Question
When conducting a post-implementation review for a security investment, it is MOST important to determine whether the investment:
Options
- Acomplies with industry standards.
- Bachieves projected financial benefits.
- Cmeets internal requirements.
- Ddelivers anticipated risk reduction.
How the community answered
(48 responses)- A2% (1)
- B4% (2)
- D94% (45)
Explanation
The most important outcome of a post-implementation review for a security investment is to verify whether it has effectively reduced the targeted risks as anticipated, which justifies the investment and aligns with security objectives.
Topics
#Post-implementation review#Security investment#Risk reduction#Performance measurement
Community Discussion
No community discussion yet for this question.