Certified in Risk and Information Systems Control (CRISC) — Question 724
A risk assessment has identified that departments have installed their own WiFi access points on the enterprise network. Which of the following would be MOST important to include in a report to senior management?
Answer options
- A. Planned remediation actions
- B. The network security policy
- C. The WiFi access point configuration
- D. Potential business impact
Correct answer: D
Explanation
The potential business impact is crucial for senior management as it directly relates to the risks and consequences associated with unauthorized WiFi access points. While the network security policy and access point configurations are important, they are secondary to understanding how these risks could affect business operations. Planned remediation actions are also relevant, but they are not as impactful as the potential consequences on the business.