nerdexam
Isaca

CISM · Question #953

Which of the following is the BEST way to present the status of an information security program to senior management?

The correct answer is B. Display concise dashboards. Senior management typically lacks the time and technical depth to process detailed reports or deep-dive analyses. Concise dashboards present key metrics, KPIs, and risk indicators visually and at a high level, enabling executives to quickly understand program status and make…

Submitted by fatima_kr· Apr 18, 2026Information Security Program Development and Management

Question

Which of the following is the BEST way to present the status of an information security program to senior management?

Options

  • AReport on root causes of security incidents.
  • BDisplay concise dashboards.
  • CDetail latest security trends.
  • DProvide detailed information regarding risk exposure.

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    88% (22)
  • D
    4% (1)

Explanation

Senior management typically lacks the time and technical depth to process detailed reports or deep-dive analyses. Concise dashboards present key metrics, KPIs, and risk indicators visually and at a high level, enabling executives to quickly understand program status and make informed decisions. Reporting on root causes of incidents (A) and providing detailed risk exposure information (D) are too granular and technical for a senior management audience-those belong in operational or risk committee briefings. Detailing the latest security trends (C) provides external context but does not communicate the internal program's status. Dashboards strike the right balance between clarity, brevity, and actionability for a senior audience.

Topics

#Security program reporting#Senior management communication#Performance dashboards

Community Discussion

No community discussion yet for this question.

Full CISM Practice