The Risk Subcommittee of a Corporate Board Typically Maintains a Master

question 49

Multiple Choice

The risk subcommittee of a corporate board typically maintains a master register of the most prominent risks to the company. A centralized holistic view of risk is particularly important to the corporate Chief Information Security Officer (CISO) because:

• A) IT systems are maintained in silos to minimize interconnected risks and provide clear risk boundaries used to implement compensating controls
• B) risks introduced by a system in one business unit can affect other business units in ways in which the individual business units have no awareness
• C) corporate general counsel requires a single system boundary to determine overall corporate risk exposure
• D) major risks identified by the subcommittee merit the prioritized allocation of scare funding to address cybersecurity concerns

---

Definitions:

Rich Channel

A communication medium that is able to convey a large amount of information, including verbal and non-verbal cues, effectively.

Communication

The process of sharing information, ideas, feelings, and messages with others through spoken words, writing, or visual media.

Passive Listening

The act of hearing someone speak without actively engaging or providing feedback, often leading to a superficial understanding of the message.

Assumptions

Beliefs or statements taken for granted without proof.