Multiple Choice
A missing/ineffective security control is identified. Which of the following should be the NEXT step?
A) Perform an audit to measure the control formally
B) Escalate the issue to the IT organization
C) Perform a risk assessment to measure risk
D) Establish Key Risk Indicators
Correct Answer:
Verified
Correct Answer:
Verified
Related Questions
Q310: What is the following command trying to
Q311: An information security department is required to
Q312: If the result of an NPV is
Q313: Scenario: You are the CISO and are
Q314: Which of the following represents the BEST
Q316: Which of the following are the MOST
Q317: Annual Loss Expectancy is derived from the
Q318: Your company has a "no right to
Q319: The CIO of an organization has decided
Q320: The establishment of a formal risk management