To maximize cost-effectiveness, a security manager should do the following? Three items

• A. Spending the least amount possible.
• B. Minimizing the cost while maintaining safety.
• C. Maximizing the security budget.
• D. Ensure the operations are conducted in the least expensive, but cost-effective way.

Answer: (D)

Cost-effectiveness means achieving the required level of security while using the smallest total cost, taking into account both upfront and ongoing expenses and balancing risk reduction with expenditure. The best approach is to ensure operations are conducted in the least expensive, but cost-effective way. This means selecting controls that meet security objectives without paying for unnecessary features, and continuously evaluating options for the best cost-benefit—minimizing waste while still delivering adequate protection.

Spending the least amount possible is too extreme and can leave gaps in protection. Maximizing the security budget defeats cost-effectiveness by prioritizing spend over value. Minimizing cost while maintaining safety is close, but the phrasing here emphasizes the need to pursue the most economical way that still remains cost-effective, which better captures the intended balance between cost and security outcomes.