Certified Information Security Manager (CISM) — Question 855

Which of the following BEST facilitates the reporting of useful information about the effectiveness of the information security program?

Answer options

• A. Security benchmark report
• B. Risk heat map
• C. Security metrics dashboard
• D. Key risk indicators (KRIs)

Correct answer:

Explanation

The correct answer is C, the Security metrics dashboard, as it provides a comprehensive overview of various security metrics and trends, enabling effective reporting on the program's performance. Options A, B, and D, while useful for specific aspects of security, do not offer the same level of overall insight into the effectiveness of the information security program.