Question 109: Isaca Certified Information Security Manager

Which of the following is the MOST relevant information to include in an information security risk report to facilitate senior management's understanding of impact to the organization?

1. A. Detailed assessment of the security risk profile
2. B. Risks inherent in new security technologies
3. C. Findings from recent penetration testing
4. D. Status of identified key security risks — đáp án hiện tại