CISM Question 213

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Why not B

• 1

  B gives too much details. This is too much information for board members. A risk heat map gives focus to the most important items to be worried about.

• 1

  D. Risk heat map. Risk Heat map visually represents the organization's risks, typically using colors to indicate the severity or likelihood of each risk. This graphical representation makes it easy for non-technical board members to quickly grasp the state of IT risks. It provides a clear and concise overview of where the most significant risks lie and allows for easy prioritization and decision-making.