Q). Out of the options below, who is in the BEST position to develop the priorities and identify what risks and impacts would occur if there were a loss or corruption of the organization’s information resources?

A. Internal auditors
B. Security management
C. Business process owners
D. External regulatory agencies

Answer: The correct answer is "C". Business process owners are in the best position to judge the risks and impacts as they are most knowledgeable conceming their systems. Auditors, security management and
regulators are not in a position to assess the impact in case of corruption of organizations information resources.

Related CISM Exam Questions

Establishing Security Baselines
Deploying a Honeypot
Social Engineering Attacks
Metrics for Information Security Program