CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ25

VerifiedInformation Security Risk Management

Which of the following is the BEST way to help ensure that an organization’s risk appetite is considered during the risk treatment process?

Explanation

Steering committee approval of risk treatment plans provides governance oversight to confirm that selected treatments and any residual risk align with the organization’s established risk appetite.

Community Discussion

No comments yet. Be the first to start the discussion!