A project team member notifies the information security manager of a potential security risk that has not been included in the risk register. Which of the following should the information security manager do FIRST?

Question

Eric De La Vega · Accepted Answer

Add the risk to the risk register.

Eric De La Vega · Answer

Implement compensating controls.

Eric De La Vega · Answer

Analyze the identified risk.

Eric De La Vega · Answer

Prepare a risk mitigation plan.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 633 - CISM discussion

Suggested answer: D

0 comments