Which of the following would provide the MOST useful information for communicating an organization’s risk...

A high-level risk map visually summarizes risk exposure by plotting likelihood versus impact for all key risk scenarios. This helps senior management quickly identify priority risks.

ISACA CRISC notes:

“Risk heat maps or risk matrices are effective tools to communicate risk levels to executives because they visually demonstrate the distribution and severity of risks across the organization.”

Threat lists (A) or vulnerability lists (D) are too detailed and not decision-oriented.

Therefore, B. A high-level risk map is correct.

CRISC Reference: Domain 4 – Risk and Control Monitoring and Reporting, Topic: Risk Communication Tools and Dashboards.