A Chief Information Security Officer (CISO) Needs to Establish a KRI

question 86

Multiple Choice

A Chief Information Security Officer (CISO) needs to establish a KRI for a particular system. The system holds archives of contracts that are no longer in use. The contracts contain intellectual property and have a data classification of non-public. Which of the following be the BEST risk indicator for this system?

• A) Average minutes of downtime per quarter
• B) Percent of patches applied in the past 30 days
• C) Count of login failures per week
• D) Number of accounts accessing the system per day

---

Definitions:

Issuing Bonds

The process of a corporation or government entity raising capital by selling bonds to investors, which are essentially loans from the investors to the issuer.

Par Value

A nominal value assigned to a security or stock, often used to determine its face value rather than market value.

Market Rate

The current price or interest rate at which goods, services, or financial instruments are traded in the open market.

Contract Rate

The agreed upon price for goods or services, often used in the context of interest rates on loans or fixed-income securities.