Discuss three alternatives to feasibility analysis.

Question

What will be an ideal response?

Answer 1

- Benchmarking is the process of seeking out and studying the practices used in other organizations that produce the results you desire in your organization. When benchmarking, an organization typically uses either metrics-based or process-based measures.- Due care and due diligence occur when an organization adopts a certain minimum level of security equal to what any prudent organization would do in similar circumstances.- Best business practices are those thought to be among the best in the industry, balancing the need to access information with adequate protection.- The gold standard is for ambitious organizations in which the best business practices are not sufficient. These organizations aspire to set the standard for their industry, and are thus said to be in pursuit of the gold standard.- Government recommendations and best practices are useful for organizations that operate in industries regulated by governmental agencies. Government recommendations, which are, in effect, requirements, can also serve as excellent sources for information about what some organizations may be doing or are required to do to control information security risks.- A baseline is derived by comparing measured actual performance against established standards for the measured category.