CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ693

Information Security Risk Management

What is the PRIMARY reason for monitoring key risk indicators (KRIs) associated with information security?

  • A To alert on unacceptable risk
  • B To identity residual risk
  • C To reassess risk appetite
  • D To benchmark control performance
Explanation

Key risk indicators provide early warning that information-security risk is approaching or has exceeded an unacceptable level, enabling timely management action.

Community Discussion

No comments yet. Be the first to start the discussion!