CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ97

VerifiedInformation Security Risk Management

Which of the following is MOST important to include in a report on an organization's information security risk?

Explanation

Residual risk is the exposure that remains after controls and other risk treatments have been applied. It represents the organization’s remaining risk requiring acceptance, additional treatment, or ongoing monitoring.

Community Discussion

No comments yet. Be the first to start the discussion!