Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
D it is
D. Status of identified key security risks To facilitate senior management's understanding of the impact on the organization, the most relevant information to include in an information security risk report is the status of identified key security risks. Senior management needs concise and significant information that directly relates to the organization's strategic objectives and operational integrity. Providing them with the current status of key security risks (including their severity, potential impact on business operations, and the measures taken or proposed for mitigation) directly supports strategic decision-making. This information allows senior management to gauge how these risks might affect the organization's goals and what actions are needed to address them. Unlike the detailed technical specifics which might be less accessible to individuals without a technical background (options A, B, and C), focusing on the status of key risks provides a clear and immediate connection to business outcomes and priorities.
why C pen test finding is the answer?