Which of the following is MOST important for obtaining senior management commitment for an updated information security strategy following the identification of new risk?

Question

Options

• ACapturing the risk in the risk register
• BDemonstrating the impact to the organization
• CUpdating the risk assessment process
• DPresenting a list of recent incidents in the industry

• A
  15% (3)
• B
  75% (15)
• C
  5% (1)
• D
  5% (1)

Explanation

To obtain senior management commitment for an updated information security strategy, it is crucial to demonstrate the impact that newly identified risks pose to the organization. Senior management prioritizes decisions based on business impact, so clearly showing how these risks affect financials, operations, reputation, or compliance will justify the need for strategic updates. While capturing risks in a register and updating risk assessments are important, they do not directly drive executive-level commitment as effectively as demonstrating impact.

No community discussion yet for this question.