1. Home
2. All questions
3. Question 310

CISM study material · question 310 of 1000

Stakeholders in different units assign different priorities to risks with identical exposure values. Which governance step does IR 8286 say prevents this?

• Risk management
• Security governance

1. Converting all exposures into monetary values
2. Requiring all prioritisation to be performed centrally, so that one team applies the same ranking to every entry raised
3. Establishing and publishing thresholds for ranges of exposure as part of the enterprise governance model
4. Restricting prioritisation to the enterprise risk officer, whose ranking then binds every business unit in the organisation

Challenge yourself on this topic → Study as cards