CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ827

Information Security Risk Management

Which of the following would provide the best input to a business case for a technical solution that addresses potential system vulnerabilities?

  • A Business impact analysis (BIA)
  • B Vulnerability scan results
  • C Risk assessment
  • D Penetration test results
Explanation

A risk assessment evaluates identified vulnerabilities in the context of likelihood, potential impact, and overall risk. This provides the business justification and prioritization needed to support investment in a technical solution.

Community Discussion

No comments yet. Be the first to start the discussion!