QuestionQ402

Governance of Enterprise IT

Which of the following is the BEST way for a CIO to improve alignment of security risk management between IT and the business?

  • A Facilitate joint workshops for IT and the business on risk assessment techniques.
  • B Analyze benchmark reports to understand the organization's security investments against competitors.
  • C Establish a process in which IT and the business collaborate on risk assessment and mitigation prioritization.
  • D Perform a trend analysis based on security investment levels and business initiatives.
Explanation

A formal process for IT and business stakeholders to collaborate on risk assessment and mitigation prioritization aligns security decisions with business objectives, impact, and risk tolerance on an ongoing basis.

Community Discussion

No comments yet. Be the first to start the discussion!