CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ1109

Information Security Risk Management

An information security manager has been asked to deliver a brief presentation to the board of directors about the organization’s current IT risk posture. Which of the following would be MOST effective to include in this presentation?

  • A Gap analysis results
  • B Risk register
  • C Threat assessment results
  • D Risk heat map
Explanation

A risk heat map presents risks visually by likelihood and impact, enabling directors to quickly understand the organization’s overall risk exposure and the relative priority of key risks.

Community Discussion

No comments yet. Be the first to start the discussion!