An external security audit has reported multiple instances of control noncompliance. Which of the following is MOST important for the information security manager to communicate to senior management?
A.
The impact of noncompliance on the organization's risk profile
B.
An accountability report to initiate remediation activities
C.
Control owner responses based on a root cause analysis
D.
A plan for mitigating the risk due to noncompliance
D: a la alta gerencia lo que mas le interesa no es que se le informe como se esta incumpliendo y cual es el impacot, sino que se le lelva como se va a remediar lo anterior.
A. The impact of noncompliance on the organization's risk profile.
The impact of noncompliance on the organization's risk profile is crucial information that senior management needs to understand. It helps senior management grasp the potential consequences and implications of the control noncompliance in relation to the organization's overall risk posture.
NOTE: Not 100% sure about this.
I think the correct answer is (D.) A plan for mitigating the risk due to non-compliance, cause the first thing management is going do regardless of the options is ask: how are you going to fix?
Rationale:
(A.) The impact of non-compliance on the organization's risk profile is a great idea ... but I feel that the next question will be: how are you going to fix it? (i.e. plan)
B. An accountability report to initiate remediation activities is incorrect cause you need to have a plan first.
C. Control owner responses based on a root cause analysis is a great idea ... but I feel that the next question will be: when are you going to fix it? (i.i plan)
Since you are communicating with senior management you will need demonstrate why they would care to mitigate the risk - and you cant do that if you cant show the impact of non-compliance. The mitigation needs to be worth it.
This section is not available anymore. Please use the main Exam Page.CISM Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Sammy65
1 year, 5 months agoJae_kes
1 year, 7 months agorichck102
1 year, 7 months agoSaisharan
1 year, 7 months agodark_3k03r
1 year, 8 months agoSilverFox
1 year, 2 months agoAlexJacobson
12 months agocidigi
9 months, 2 weeks ago