CGEIT: Certified in the Governance of Enterprise IT

By Isaca · Question Mode

QuestionQ64

VerifiedRisk Optimization

A hospital executive steering committee is concerned by the growing number of cyberattacks on patient data systems throughout the industry. The committee has asked the CIO for regular reporting that will support improved oversight of the hospital’s cyber-related risk. Which of the following would be MOST helpful to include in the report?

Explanation

Key risk indicators provide measurable, forward-looking signals of changes in cyber-risk exposure and whether risk is nearing or exceeding the organization’s tolerance. They give executive governance bodies information needed to monitor the risk posture and direct timely management action. ISACA identifies continuous reporting of cyber-risk KRIs as a key practice for board and executive oversight.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!