Business case
- Term
- Business case
- Exam
- CISA & CISM
- Definition
A document justifying an investment by comparing benefits with costs and risks.
- Explained
A business case justifies an investment by comparing expected benefits — including risk reduction — with total costs and risks, against alternatives including doing nothing. It should be revisited during delivery and used to measure benefits afterward.
- In practice
A proposal shows that a US$200,000 identity platform reduces expected losses by US$450,000 a year.
- Often confused with
- Feasibility study
- Exam angle
Revisit it at key points; it is a living document.
- Related
Post-implementation review · Annualized loss expectancy (ALE)