Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Percentage of vulnerabilities remediated within the agreed service level. The best key performance indicator (KPI) to measure the effectiveness of a vulnerability management process is the "Percentage of vulnerabilities remediated within the agreed service level." This KPI reflects how well the organization is able to identify and address vulnerabilities within the specified timeframes outlined in the service level agreements (SLAs). While the other options (number of vulnerabilities identified, number of vulnerabilities re-opened, percentage of vulnerabilities escalated to senior management) are relevant metrics for assessing various aspects of vulnerability management, they don't directly measure the efficiency and effectiveness of the process itself as accurately as the percentage of vulnerabilities remediated within the agreed service level. This KPI directly focuses on the timely resolution of vulnerabilities, which is a crucial aspect of maintaining a secure environment.
Agree it is A.
Agree.