Which of the following would BEST fulfill a board of directors' request for a concise overview of information security risk facing the business?

The correct answer is C. Risk heat map. A risk heat map is a visual tool that plots risks by likelihood and impact on a color-coded grid (green/yellow/red), giving executives an immediate, intuitive snapshot of the risk landscape without requiring technical expertise to interpret. This is ideal for a board seeking a…

Submitted by lucia.co· Apr 18, 2026Information Security Risk Management

Question

Which of the following would BEST fulfill a board of directors’ request for a concise overview of information security risk facing the business?

Options

ABusiness impact analysis (BIA)
BRisk scenario summary
CRisk heat map
DMetrics dashboard

How the community answered

(40 responses)

A
8% (3)
B
15% (6)
C
75% (30)
D
3% (1)

Explanation

A risk heat map is a visual tool that plots risks by likelihood and impact on a color-coded grid (green/yellow/red), giving executives an immediate, intuitive snapshot of the risk landscape without requiring technical expertise to interpret. This is ideal for a board seeking a concise overview. A BIA (A) is detailed and operations-focused, not a risk overview. A risk scenario summary (B) is text-heavy and not as immediately digestible. A metrics dashboard (D) tracks performance over time but doesn't clearly communicate relative risk exposure at a glance.

Topics

#Risk reporting#Board communication#Risk visualization#Information security risk

Community Discussion

No community discussion yet for this question.

Full CISM Practice