nerdexam
Isaca

CISM · Question #669

An organization is transitioning to a Zero Trust architecture. Which of the following is the information security manager's BEST approach for communicating the implications of this transition to the…

The correct answer is D. Provide an outline of the business impact in terms of risk reduction and changes in user. Board-level communication should focus on strategic outcomes. Highlighting how Zero Trust impacts business - particularly in terms of reducing risk and affecting user experience - aligns with the board’s priorities and facilitates informed decision-making.

Submitted by fatima_kr· Apr 18, 2026Information Security Governance

Question

An organization is transitioning to a Zero Trust architecture. Which of the following is the information security manager’s BEST approach for communicating the implications of this transition to the board of directors?

Options

  • ASummarize the training plan and end user feedback in an internal portal and send the link to the
  • BPresent a diagram of core Zero Trust logical components to help visualize the architectural
  • CPrepare a report on the Zero Trust implementation that includes a status dashboard and timeline.
  • DProvide an outline of the business impact in terms of risk reduction and changes in user

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    6% (1)
  • C
    11% (2)
  • D
    78% (14)

Explanation

Board-level communication should focus on strategic outcomes. Highlighting how Zero Trust impacts business - particularly in terms of reducing risk and affecting user experience - aligns with the board’s priorities and facilitates informed decision-making.

Topics

#Zero Trust#Stakeholder Communication#Risk Management#Business Impact

Community Discussion

No community discussion yet for this question.

Full CISM Practice