Câu 48: CISA: Certified Information Systems Auditor

During an incident management audit, an IS auditor finds that several similar incidents were logged during the audit period. Which of the following is the auditor'sMOST important course of action?

1. A. Document the finding and present it to management.
2. B. Determine if a root cause analysis was conducted. — đáp án hiện tại
3. C. Validate whether all incidents have been actioned.
4. D. Confirm the resolution time of the incidents.