ある組織は、サイバー保険を購入してリスクを移転したいと考えています。リスク管理担当者が契約交渉のために上級管理職に伝える上で最も重要なのは次のうちどれでしょうか。
正解:C
The most important information for the risk practitioner to communicate to senior management for contract negotiation purposes when the organization wants to transfer risk by purchasing cyber insurance is the current annualized loss expectancy report, as it provides an estimate of the potential financial loss or impact that theorganization may incur due to a cyber risk event in a given year, and helps to determine the optimal coverage and premium of the cyber insurance. The other options are not the most important information, as they are more related to the audit, asset, or industry aspects of the cyber risk, respectively, rather than the financial aspect of the cyber risk. References = CRISC Review Manual, 7th Edition, page 111.