Which is the BEST way to measure and prioritize isaca video

cism video for which is the BEST way to measure and prioritize aggregate risk deriving from a chain of linked system vulnerabilities?

Full Certification Question

Which is the BEST way to measure and prioritize aggregate risk deriving from a chain of linked system vulnerabilities?