CISM: Certified Information Security Manager

Penetration-test findings require risk assessment to determine their business impact and risk level in the organization’s context. That assessment provides the basis for prioritizing remediation, setting acceptable resolution timeframes, requesting funding, and reporting material risks to senior management.