A security analyst is tasked to create an executive briefing, which explains the activity and motivation of a cyber adversary. Which of the following is the MOST important content for the brief for…

Question

Options

• AThreat actor types, threat actor motivation, and attack tools
• BUnsophisticated agents, organized groups, and nation states
• CThreat actor types, attack sophistication, and the anatomy of an attack
• DThreat actor types, threat actor motivation, and the attack impact

• A
  10% (3)
• B
  3% (1)
• C
  16% (5)
• D
  71% (22)

Explanation

An executive briefing for management personnel must prioritize business-relevant information over technical detail. Option D - threat actor types, threat actor motivation, and attack impact - is correct because management needs to understand WHO is attacking (types), WHY they are attacking (motivation), and WHAT IT COSTS the business (impact). This enables informed decisions on risk tolerance, budget allocation, and response strategy. Option A is wrong because 'attack tools' is a technical detail irrelevant to executives. Option C is wrong because 'anatomy of an attack' is too technical for management. Option B is merely a subset of threat actor types and lacks the business context of motivation and impact.

No community discussion yet for this question.