Exam CISM topic 1 question 213 discussion

An effective way to include in a short presentation on the organization's current IT risk posture to the board of directors would be a risk heat map. A risk heat map is a visual representation of the organization's current risk posture, which allows the board of directors to quickly and easily understand the overall level of risk, as well as the areas of greatest concern. It can be used to highlight the most critical risks the organization is facing, including the likelihood and potential impact of each risk. The heat map can be used to communicate the current risk posture of the organization and the effectiveness of implemented controls. The board of directors can then make informed decisions on where to allocate resources to mitigate the most critical risks. While gap analysis results, risk register, threat assessment results can also be useful, a heat map is a more visually appealing and effective way to present the information to the board of directors.

Why not B

D. Risk heat map. Risk Heat map visually represents the organization's risks, typically using colors to indicate the severity or likelihood of each risk. This graphical representation makes it easy for non-technical board members to quickly grasp the state of IT risks. It provides a clear and concise overview of where the most significant risks lie and allows for easy prioritization and decision-making.

D. Risk heat map