Which of the following would BEST fulfill a board of directors' request for a concise overview of information security risk facing the business?

A Business Impact Analysis (BIA) details the impact of disruptions on business processes but is typically a detailed report, not a concise overview of *all* security risks.

A balanced scorecard is a strategic performance management tool that measures various aspects of an organization, not specifically focused on a concise overview of security risk.

A risk heat map is the best tool for providing a board of directors with a concise overview of information security risk because it visually presents the severity and likelihood of various risks. This graphical representation allows for quick comprehension of the most critical risks, enabling the board to prioritize concerns and make informed strategic decisions regarding risk treatment.

A risk scenario summary, while useful, is often more detailed and less immediately digestible than the visual aggregation provided by a heat map for a board-level overview.