Certified Information Security Manager (CISM) — Question 1015

Which of the following would BEST fulfill a board of directors' request for a concise overview of information security risk facing the business?

Answer options

• A. Business impact analysis (BIA)
• B. Balanced scorecard
• C. Risk heat map
• D. Risk scenario summary

Correct answer: C

Explanation

The correct answer is C, as a Risk heat map visually represents the severity and likelihood of risks, making it easier for the board to understand the security landscape at a glance. The other options, while useful, do not provide the same level of immediate clarity and visual impact for summarizing risks.