An organization plans to become ISO 27001 compliant and asked a compliance team to complete the initial implementation project. Which type of information is appropriate to present to executive…

Question

Options

• Aestimated budget required for implementation
• Bgaps between unpatched systems and requirements
• Cservers and software asset databases affected by the project
• Dtechnical specifications of hardware and software required for implementation

• A
  76% (22)
• B
  14% (4)
• C
  3% (1)
• D
  7% (2)

Explanation

Executive stakeholders care about business impact and financial decisions, not technical details - so option A (estimated budget) is the right fit because it informs resource allocation and go/no-go decisions at the leadership level. Option B (gaps between unpatched systems and requirements) is too granular and operational - that belongs in a report to IT/security teams, not executives. Option C (specific servers and software assets affected) is likewise a technical inventory detail that executives have no actionable use for in a presentation context. Option D (technical hardware/software specifications) is implementation-level detail suited for engineers and architects, not decision-makers.

Memory tip: Think "C-suite = Cost and Commitment." Executives ask "How much will this cost and what are we committing to?" - not "Which servers need patching?" If an answer choice sounds like something an engineer would care about, it's probably wrong for an executive audience question.

No community discussion yet for this question.