Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The most relevant information for an information security manager to communicate to the board of directors is C. The level of inherent risk. Explanation: The board of directors is primarily concerned with the overall risk to the organization before any security controls are implemented, which is represented by the inherent risk level.
I think the answer is A. BoD will most likely concern regarding the exposure level (potential loss in the future) rather than the level of inherent risk (current state).
The level of exposure to what? The question doesn’t say anything about a threat. Reporting risk is the job.