Câu 315: Isaca Certified in Risk and Information Systems Control

An organization's internal auditors have identified a new IT control deficiency in the organization's identity and access management (IAM) system. It is most important for the risk practitioner to:

1. A. perform a follow-up risk assessment to quantify the risk impact
2. B. verify that applicable risk owners understand the risk — đáp án hiện tại
3. C. implement compensating controls to address the deficiency
4. D. recommend replacement of the deficient system