CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ745

Information Security Risk Management

Which of the following is MOST appropriate to communicate to senior management about information risk?

  • A Risk profile changes
  • B Vulnerability scanning progress
  • C Defined risk appetite
  • D Emerging security technologies
Explanation

Changes to the risk profile provide senior management with decision-relevant visibility into shifts in the organization’s information-risk exposure and whether risk treatment or strategic action is needed.

Community Discussion

No comments yet. Be the first to start the discussion!