An organization's information security team presented the risk register at a recent information security steering committee meeting. Which of the following should be of MOST concern to the committee?
A.
No owners were identified for some risks.
B.
Business applications had the highest number of risks.
C.
Risk mitigation action plans had no timelines.
D.
Risk mitigation action plan milestones were delayed.
A - the MOST concerning. Other options at least have some accountability.
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Josef4CISM
1 month, 1 week agoshootnot
4 months, 2 weeks ago