# CISM — Question 424

**Type:** multiple_choice
**Topics:** topic_1

## Question

An information security risk analysis BEST assists an organization in ensuring that:

## Correct Answer

_See scenario._

## Explanation

Selected Answer: B
CISM - AIO 2nd -  The risk analyst studies different event scenarios and determines the impact of each. This may be expressed in quantitative terms (dollars or other currency) or qualitative terms (high/medium/low or a numeric scale of 1 to 5 or of 1 to 10).

Sounds like B to me

**Reference:** examtopics_top_comment

---
Source: https://hiexam.net/q/isaca/CISM/424  
Practice (tracked): https://hiexam.net/study/CISM/practice