ExamGecko
Question list
Search
Search

Question 601 - CISM discussion

Report
Export

Communicating which of the following would be MOST helpful to gain senior management support for risk treatment options?

A.
Quantitative loss
Answers
A.
Quantitative loss
B.
Industry benchmarks
Answers
B.
Industry benchmarks
C.
Threat analysis
Answers
C.
Threat analysis
D.
Root cause analysis
Answers
D.
Root cause analysis
Suggested answer: A

Explanation:

communicating the quantitative loss associated with the risk scenarios and the risk treatment options would be the most helpful to gain senior management support, as it helps to demonstrate the value and effectiveness of the risk treatment options in terms of reducing the likelihood and impact of the risk. Quantitative loss also helps to compare the cost and benefit of the risk treatment options and to prioritize the most critical risks. Industry benchmarks, threat analysis, and root cause analysis may be useful for understanding and assessing the risk, but they do not directly measure the performance of the risk treatment options.

Reference=Five Key Considerations When Developing Information Security Risk Treatment Plans,CISM Domain 2: Information Risk Management (IRM) [2022 update]

asked 01/10/2024
Jonaid Alam
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first