Which of the following provides the MOST insight into an organization's IT threat exposure?
A.
Industry benchmarks
B.
Risk assessment reports
C.
External audit results
D.
Tabletop exercises
The Answer Is:
B
This question includes an explanation.
Explanation:
Risk assessment reports are tailored to the organization and identify specific vulnerabilities, threats, and potential impacts. They provide actionable insights into IT risk exposure that can be used for prioritization and mitigation.