Valid CGEIT Dumps shared by ExamDiscuss.com for Helping Passing CGEIT Exam! ExamDiscuss.com now offer the newest CGEIT exam dumps, the ExamDiscuss.com CGEIT exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com CGEIT dumps with Test Engine here:
A newly hired IT director of a large international enterprise has been asked to provide periodic updates regarding IT risk to the board. Which of the following is the MOST effective way to initially address this request?
Correct Answer: B
According to the ISACA paper on Tactics for Effectively Communicating Cybersecurity Risk to Boards of Directors1, the most effective way to initially address the request of providing periodic updates regarding IT risk to the board is to include key IT risks in a dashboard submitted to the board quarterly. A dashboard is a visual tool that can help the board members quickly understand the current status and trends of IT risk, as well as the actions taken or planned to mitigate them. A dashboard should be concise, clear, consistent and relevant, and should highlight the most significant IT risks that could impact the enterprise's objectives and performance. A dashboard should also align with the enterprise's risk appetite and tolerance, and provide recommendations for improvement or escalation. The other options are not as effective as a dashboard, as they may be too detailed, too frequent, too narrow or too reactive for the board's needs.