Certified Information Security Manager CISM · Free Practice Question Easy
Question 117
When considering the selection of a key risk indicator (KRI), what holds the utmost significance among the options below?
- A A. Cost-effectiveness of implementation
- B B. Availability of advanced monitoring tools
- C C. Frequency of past security incidents
- D D. Criticality of the function
Reveal correct answer
Correct answer: D
Explanation
Correct Answer: D. Criticality of the function Explanation: The criticality of the function is the most significant factor in an organization's choice of a key risk indicator (KRI). The importance of a particular business function in the overall operations of the organization helps determine the level of risk associated with it. KRIs should be aligned with critical business functions to provide meaningful insights into potential risks that may significantly impact the organization's objectives and operations.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
