Which of the following is the MOST important characteristic to consider when prioritizing vulnerability remediation?

The correct answer is A. Impact. Remediation priority should be driven first by business impact (what happens if the vulnerability is exploited), because the goal is to reduce risk to the organization’s most critical assets and processes; exploitability and effort are important, but secondary to impact.

Submitted by skyler.x· Apr 18, 2026Information Security Risk Management

Question

Options

AImpact
BKey risk indicators (KRIs)
CExploitability
DEffort to mitigate

How the community answered

(46 responses)

A
87% (40)
B
4% (2)
C
7% (3)
D
2% (1)

Explanation

Remediation priority should be driven first by business impact (what happens if the vulnerability is exploited), because the goal is to reduce risk to the organization’s most critical assets and processes; exploitability and effort are important, but secondary to impact.

Topics

#Vulnerability prioritization#Risk assessment#Impact analysis#Remediation

Community Discussion

No community discussion yet for this question.

Full CISM Practice