Certified in Risk and Information Systems Control (CRISC) — Question 1156

Which of the following sources is MOST relevant to reference when updating security awareness training materials?

Answer options

• A. Global security standards
• B. Risk management framework
• C. Recent security incidents reported by competitors
• D. Risk register

Correct answer: C

Explanation

The correct answer, C, is most relevant because recent security incidents provide real-world examples that can inform and enhance training materials, making them more applicable to current threats. Options A and B are broader frameworks that might not address specific, current issues, while D refers to internal documents that may not reflect external threats or incidents.