Question 311:
Which of the following approaches is BEST for selecting controls to minimize information security risks?
Answer options:
A. Cost-benefit analysis B. Control-effectiveness C. Risk assessment D. Industry best practices
Answer correct:
C