CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ61

VerifiedInformation Security Risk Management

A business unit processes sensitive personally identifiable information (PII), creating substantial financial liability for the organization if a breach occurs.

Which of the following is the BEST method to mitigate the organization’s risk?

Explanation

Cyber insurance transfers a substantial portion of the financial loss associated with a PII breach, such as incident-response, legal, notification, and liability costs, to the insurer. This directly addresses the stated financial-liability risk.

Community Discussion

No comments yet. Be the first to start the discussion!