CISM · Question #417
Which of the following is MOST useful for providing senior management an overview of information risk that may impact the organization?
The correct answer is A. Risk register. A risk register provides a comprehensive overview of identified risks, their potential impact, likelihood, and mitigation strategies, making it the most useful tool for senior management to understand information risks that may impact the organization. It enables informed…
Question
Which of the following is MOST useful for providing senior management an overview of information risk that may impact the organization?
Options
- ARisk register
- BThird-party risk assessment
- CBusiness impact analysis (BIA)
- DInternal audit reports
How the community answered
(53 responses)- A94% (50)
- B4% (2)
- D2% (1)
Explanation
A risk register provides a comprehensive overview of identified risks, their potential impact, likelihood, and mitigation strategies, making it the most useful tool for senior management to understand information risks that may impact the organization. It enables informed decision- making and prioritization of security efforts. While BIA and audit reports provide valuable insights, they do not offer a centralized, continuous view of risk like a risk register does.
Topics
Community Discussion
No community discussion yet for this question.