Certified in Risk and Information Systems Control (CRISC) — Question 873

Senior management wants to increase investment in the organization's cybersecurity program in response to changes in the external threat landscape. Which of the following would BEST help to prioritize investment efforts?

Answer options

• A. Reviewing the outcome of the latest security risk assessment
• B. Increasing the frequency of updates to the risk register
• C. Engaging independent cybersecurity consultants
• D. Analyzing cyber intelligence reports

Correct answer: A

Explanation

The correct answer, A, is appropriate because reviewing the latest security risk assessment provides a detailed understanding of current vulnerabilities and risks, allowing for informed investment decisions. The other options, while useful, do not directly prioritize investment efforts based on a comprehensive evaluation of existing risks.