What should the risk owner do?

An organization with a large computer network identified a potential cyber security threat. Although certain measures were implemented to avoid the risk, the cyber security threat occurs. The measures were partially successful and a new unforeseen risk emerges.

What should the risk owner do?
A . Develop an efficient network protection solution quickly to mitigate the risk.
B. Escalate the case to the risk manager and wait for their instructions.
C. Conduct an analysis to determine the root cause of the failed response.
D. Apply a work around to eliminate or mitigate the impact of the threat.

Answer: C

Explanation:

The risk owner should conduct an analysis to determine the root cause of the failed response. Understanding the root cause will help in developing appropriate measures to address the new unforeseen risk and improve the effectiveness of risk

responses in the future.