The Risk Subcommittee of a Corporate Board Typically Maintains a Master

question 49

Multiple Choice

The risk subcommittee of a corporate board typically maintains a master register of the most prominent risks to the company. A centralized holistic view of risk is particularly important to the corporate Chief Information Security Officer (CISO) because:

• A) IT systems are maintained in silos to minimize interconnected risks and provide clear risk boundaries used to implement compensating controls
• B) risks introduced by a system in one business unit can affect other business units in ways in which the individual business units have no awareness
• C) corporate general counsel requires a single system boundary to determine overall corporate risk exposure
• D) major risks identified by the subcommittee merit the prioritized allocation of scare funding to address cybersecurity concerns

---

Definitions:

Competitive

Pertaining to the ability of organizations or individuals to outperform rivals in the market by offering superior value.

HR Supply

The availability of potential employee resources that a company can draw upon to meet its human capital needs.

Trust and Mutual Commitment

The belief in the reliability, truth, ability, or strength of a party, coupled with a pledge to maintain a relationship over time.

Retention Problems

Issues faced by organizations in keeping their valued employees from leaving.