A security analyst is tasked to create an executive briefing, which explains the activity and motivation of a cyber adversary. Which of the following is the MOST important content for the brief for management personnel to understand?

Question

Accepted Answer

D. Threat actor types, threat actor motivation, and the attack impact Threat actor types give executives context on who is targeting the organization and their likely capabilities. Threat actor motivation explains why the organization is being targeted, enabling prioritization of assets and controls. Attack impact - the potential financial, operational, and reputational damage - is the most critical element for management because it directly informs risk acceptance decisions and resource allocation.

Answer

A. Threat actor types, threat actor motivation, and attack tools Attack tools are a technical implementation detail relevant to security engineers and incident responders, not to executives who need business impact information to make strategic decisions.

Answer

B. Unsophisticated agents, organized groups, and nation states Listing only actor categories such as unsophisticated agents and nation states, without motivation or impact, gives management insufficient context to assess organizational risk or justify security investment.

Answer

C. Threat actor types, attack sophistication, and the anatomy of an attack Attack sophistication and the anatomy of an attack are operationally focused details intended for security analysts and SOC personnel; executives require impact-oriented content rather than technical attack chain descriptions.

A security analyst is tasked to create an executive briefing, which explains the activity and motivation of a cyber adversary. Which of the following is the MOST important content for the brief for…

Question

Options

How the community answered

Why each option

Topics

Community Discussion