QuestionQ39

VerifiedInformation Security Risk Management

When deciding how to prioritize risk-mitigation activities, which of the following would give senior management the MOST comprehensive information?

Explanation

A risk register provides a consolidated view of organizational risks, including their assessment, priority, owners, and mitigation or treatment status. It therefore supports senior-management comparisons and prioritization of risk-mitigation activities more comprehensively than an individual assessment, action plan, or audit report.

Community Discussion

No comments yet. Be the first to start the discussion!