Câu 50: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

An organization is prioritizing efforts to remediate or mitigate risks identified during the latest assessment. For one of the risks, a full remediation was not possible, but the organization was able to successfully apply mitigations to reduce the likelihood of impact. Which of the following should the organization perform NEXT?

1. A. Assess the residual risk. — đáp án hiện tại
2. B. Update the organization's threat model.
3. C. Move to the next risk in the register.
4. D. Recalculate the magnitude of impact.