Which term best describes the rationale for expenses based on security needs?

• A. Cost Justification
• B. Excessive Access Rights
• C. Insufficient Access
• D. Administrator Access

Answer: (A)

Cost justification is the process of tying security investments to specific risk reduction and regulatory needs. By articulating how a proposed expenditure reduces the likelihood or impact of a threat, protects critical assets, or helps meet compliance requirements, you provide a clear, business-focused rationale for spending. This aligns security decisions with actual security needs and potential losses, making the case for funding.

Excessive access rights describe a state where users have more permissions than necessary, which is a security problem to be mitigated—not the reason a purchase is needed. Insufficient access describes a blocking issue where users can’t do what they need, also a problem to fix rather than the justification for spending. Administrator access refers to a role with elevated privileges, not the rationale for incurring costs.