Which of the following communicates the MOST meaningful information regarding the state of the information security program to the board and executives?

The correct answer is D. Current risk profile of the organization. The current risk profile of the organization provides board members and executives with the most meaningful insight into the organization's security posture, key risks, and potential impact on business objectives. This information helps in strategic decision-making, resource…

Submitted by daniela_cl· Apr 18, 2026Information Security Governance

Question

Options

ARisk profile of industry competitors
BHistorical incident management metrics
CEmerging threat landscape
DCurrent risk profile of the organization

How the community answered

(43 responses)

A
5% (2)
B
7% (3)
C
16% (7)
D
72% (31)

Explanation

The current risk profile of the organization provides board members and executives with the most meaningful insight into the organization's security posture, key risks, and potential impact on business objectives. This information helps in strategic decision-making, resource allocation, and risk management. While industry risk profiles, historical metrics, and emerging threats are useful, they do not provide a direct view of the organization's specific security risks.

Topics

#Information security governance#Risk communication#Executive reporting#Board oversight

Community Discussion

No community discussion yet for this question.

Full CISM Practice