Câu 91: Isaca Certified Information Security Manager

Which of the following is MOST important to include when reporting information security risk to executive leadership?

1. A. Key performance objectives and budget trends
2. B. Security awareness training participation and residual risk exposures
3. C. Risk analysis results and key risk indicators (KRIs) — đáp án hiện tại
4. D. Information security risk management plans and control compliance