Which of the following is an information security manager's BEST course of action to address a significant materialized risk that was not prevented by organizational controls?

Which of the following is an information security manager’s BEST course of action to address a significant materialized risk that was not prevented by organizational controls?

exams CISM V1 CISM exam 0 Comments

Which of the following is an information security manager’s BEST course of action to address a significant materialized risk that was not prevented by organizational controls?
A . Update the business impact analysis (BIA)
B . Update the risk register.
C . Perform root cause analysis.
D . Invoke the incident response plan.

Answer: D