Certified Information Security Manager (CISM) — Question 193

Which of the following is MOST useful to display on a dashboard to demonstrate security performance?

Answer options

• A. Number of hours spent per vulnerability remediated
• B. Number of vulnerabilities detected over time
• C. Severity of currently unremediated vulnerabilities
• D. Average time to identify vulnerabilities

Correct answer: C

Explanation

The severity of currently unremediated vulnerabilities is crucial for understanding the risk level in an organization's security posture, making it the most useful metric for a dashboard. The other options, while informative, do not directly indicate the potential impact of vulnerabilities that remain unresolved.