Which of the following is MOST important to emphasize when presenting cyberattack information to gain senior management support for control enhancements?

The correct answer is B. Residual risk exposure. Emphasizing residual risk exposure highlights the potential impact of unaddressed risks despite existing controls, making it most effective in securing senior management support for additional security investments.

Submitted by noor.lb· Apr 18, 2026Information Security Risk Management

Question

Options

AControl gaps within defense-in-depth architecture
BResidual risk exposure
CThreats against internal systems
DRecent data breaches in the same industry sector

How the community answered

(44 responses)

A
23% (10)
B
59% (26)
C
14% (6)
D
5% (2)

Explanation

Emphasizing residual risk exposure highlights the potential impact of unaddressed risks despite existing controls, making it most effective in securing senior management support for additional security investments.

Topics

#Residual Risk#Risk Communication#Senior Management Engagement#Security Control Justification

Community Discussion

No community discussion yet for this question.

Full CISM Practice