The CIO wants automatic attention when residual scores rise above High. Which configuration implements that appetite rule?
Select an answer to reveal the explanation.
Short Explanation
Appetite thresholds are tripwires. Configure them so anything above High lights up review for the CIO instead of hoping someone remembers the rule in a standup.
Full Explanation
Appetite and tolerance configuration translates policy into system thresholds that can trigger review. Setting thresholds that flag residuals above High for CIO attention is the correct IRM approach. Informal reminders, artificially lowering scores, or PDF-only rules do not systematize breach handling.