Which of the following is MOST effective in monitoring an organization's existing risk?

Question

Options

• ASecurity information and event management (SIEM) systems
• BVulnerability assessment results
• CPeriodic updates to risk register
• DRisk management dashboards

• A
  9% (3)
• B
  13% (4)
• C
  3% (1)
• D
  75% (24)

Explanation

Risk management dashboards (D) are the most effective tool for monitoring existing risk because they provide real-time, consolidated visibility into the organization's current risk posture - enabling continuous tracking of risk indicators, trends, and status changes across the enterprise in a single view.

Why the distractors fall short:

• A (SIEM): SIEMs excel at detecting security events and threats, but they focus on incident detection, not holistic risk monitoring across the organization's risk landscape.
• B (Vulnerability assessments): These are point-in-time snapshots that identify weaknesses, not a continuous monitoring mechanism for existing risks.
• C (Periodic updates to risk register): A risk register is a foundational document, but periodic updates implies infrequent and reactive - not the active, ongoing monitoring the question asks about.

Memory tip: Think of dashboards as your car's instrument panel - it gives you a live, at-a-glance view of everything happening right now. A SIEM is the alarm, vulnerability scans are the mechanic's inspection, and the risk register is the maintenance log. You monitor with the dashboard, not the log.

No community discussion yet for this question.