nerdexam
Isaca

CISM · Question #288

Which of the following is the MOST important reason to develop an organizational threat profile?

The correct answer is A. To implement a proactive approach for threat management. Developing an organizational threat profile is crucial for implementing a proactive approach to threat management. By identifying and understanding potential threats specific to the organization, it enables the anticipation of attacks and the strengthening of defenses…

Submitted by anjalisingh· Apr 18, 2026Information Security Risk Management

Question

Which of the following is the MOST important reason to develop an organizational threat profile?

Options

  • ATo implement a proactive approach for threat management
  • BTo reduce the level of residual risk that must be addressed
  • CTo support business cases for information security investments
  • DTo develop threat briefings for senior management

How the community answered

(20 responses)
  • A
    85% (17)
  • B
    10% (2)
  • D
    5% (1)

Explanation

Developing an organizational threat profile is crucial for implementing a proactive approach to threat management. By identifying and understanding potential threats specific to the organization, it enables the anticipation of attacks and the strengthening of defenses accordingly. This proactive stance is essential in reducing cyber risk and enhancing overall security posture. While reducing residual risk, supporting business cases for security investments, and developing threat briefings for senior management are important, they are secondary benefits. The primary purpose of creating a threat profile is to proactively manage threats by understanding the organization's unique threat landscape.

Topics

#Threat Profile#Threat Management#Proactive Security#Risk Identification

Community Discussion

No community discussion yet for this question.

Full CISM Practice