CISM · Question #133
An information security manager wants to upgrade an organization's workstations to a new operating system version. Which of the following would be MOST helpful to gain senior management support for th
The correct answer is D. An assessment of the current operating system based on risk. Senior management approves investments when they understand the organizational risk of not acting. A risk-based assessment of the current OS demonstrates concrete threats-end-of-life support expiration, unpatched critical vulnerabilities, compliance gaps, and potential breach exp
Question
An information security manager wants to upgrade an organization's workstations to a new operating system version. Which of the following would be MOST helpful to gain senior management support for the upgrade?
Options
- AThe results of user surveys indicating issues with the current operating system
- BA list of the latest security features in the new operating system
- CA summary of performance improvements in the new operating system
- DAn assessment of the current operating system based on risk
How the community answered
(49 responses)- A10% (5)
- B4% (2)
- C14% (7)
- D71% (35)
Explanation
Senior management approves investments when they understand the organizational risk of not acting. A risk-based assessment of the current OS demonstrates concrete threats-end-of-life support expiration, unpatched critical vulnerabilities, compliance gaps, and potential breach exposure-framed in terms of business consequence. This makes the case for the upgrade in the language management uses to make decisions. User survey results (A) reflect user satisfaction, not organizational risk. New security features (B) and performance improvements (C) highlight benefits but don't establish urgency or business necessity the way a risk assessment does.
Topics
Community Discussion
No community discussion yet for this question.