An Information Security Manager Conducted a Gap Analysis, Which Revealed

question 122

Multiple Choice

An information security manager conducted a gap analysis, which revealed a 75% implementation of security controls for high-risk vulnerabilities, 90% for medium vulnerabilities, and 10% for low-risk vulnerabilities. To create a road map to close the identified gaps, the assurance team reviewed the likelihood of exploitation of each vulnerability and the business impact of each associated control. To determine which controls to implement, which of the following is the MOST important to consider?

• A) KPI
• B) KRI
• C) GRC
• D) BIA

---

Definitions:

Technical Audiences

Groups of people with specialized knowledge or interests, particularly in a specific field or technology.

Extemporaneous Presentations

Presentations given without being fully scripted, allowing for a natural and spontaneous delivery.

Careful Planning

The process of thoughtfully organizing tasks, resources, and timelines to achieve a specific objective or goal.

Erect

To build or construct something upright; to raise or assemble a structure.