Câu 33: Isaca Certified in Risk and Information Systems Control

A risk practitioner discovers several key documents detailing the design of a product currently in development have been posted on the Internet. What should be the risk practitioner's FIRST course of action?

1. A. Perform a root cause analysis
2. B. Conduct an immediate risk assessment
3. C. Invoke the established incident response plan — đáp án hiện tại
4. D. Inform internal audit