An organization wants to transfer risk by purchasing cyber insurance. Which of the following would be MOST important for the risk practitioner to…

The most important information for the risk practitioner to communicate to senior management for

contract negotiation purposes when the organization wants to transfer risk by purchasing cyber

insurance is the current annualized loss expectancy report, as it provides an estimate of the potential

financial loss or impact that theorganization may incur due to a cyber risk event in a given year, and

helps to determine the optimal coverage and premium of the cyber insurance. The other options are

not the most important information, as they are more related to the audit, asset, or industry aspects

of the cyber risk, respectively, rather than the financial aspect of the cyber risk. Reference = CRISC

Review Manual, 7th Edition, page 111.