Certified Information Security Manager (CISM) — Question 1018

Communicating which of the following would be MOST helpful to gain senior management support for risk treatment options?

Answer options

• A. Threat analysis
• B. Root cause analysis
• C. Quantitative loss
• D. Industry benchmarks

Correct answer: C

Explanation

Quantitative loss provides a clear financial perspective on the potential impacts of risks, making it easier for senior management to understand the significance of addressing those risks. In contrast, threat analysis, root cause analysis, and industry benchmarks may not convey the urgency or financial implications as effectively as quantitative loss does.