Certified Information Security Manager (CISM) — Question 563

Which of the following should be determined FIRST when preparing a risk communication plan?

Answer options

• A. Reporting content
• B. Communication channel
• C. Target audience
• D. Reporting frequency

Correct answer: C

Explanation

Identifying the target audience is crucial as it informs how the message will be tailored and delivered. Without understanding who the communication is for, the effectiveness of the content, channels, and frequency becomes diminished. The other options are important but should follow the identification of the target audience.