Which of the following BEST indicates the organizational benefit of an information security solution?

Question

Options

• AAlignment to security threats and risks
• BResource efficiencies generated by the solution
• CCosts and risk reduction calculated over time
• DReduced security training requirements

• A
  7% (3)
• B
  5% (2)
• C
  74% (31)
• D
  14% (6)

Explanation

Costs and risk reduction calculated over time (C) directly demonstrates organizational benefit because it quantifies the business value of a security investment in financial terms - the language executives and boards care about most. Measuring both cost savings and risk reduction over time gives a complete picture of ROI, which is the clearest indicator of organizational benefit.

Why the distractors fail:

• A - Alignment to threats and risks describes technical relevance, not organizational benefit; a solution can address real threats while delivering no measurable value to the business.
• B - Resource efficiencies are a component of benefit, but they're partial; they ignore the risk side of the equation, which is often the more significant factor in security decisions.
• D - Reduced training requirements is a minor operational convenience, not a meaningful indicator of organizational benefit, and could even signal a weaker security posture.

Memory tip: Think "CFO lens" - the answer that a CFO would use to justify a budget line item is almost always the right answer when the question asks about organizational benefit. Costs + risk reduction over time = ROI, and ROI is the universal language of organizational value.

No community discussion yet for this question.