Câu 39: Isaca Certified in Risk and Information Systems Control

An organization has experienced several incidents of extended network outages that have exceeded tolerance. Which of the following should be the risk practitioner's FIRST step to address this situation?

1. A. Recommend a root cause analysis of the incidents — đáp án hiện tại
2. B. Update the risk tolerance level to acceptable thresholds
3. C. Recommend additional controls to address the risk
4. D. Update the incident-related risk trend in the risk register