Câu 53: Isaca Certified Information Security Manager

A penetration test was conducted by an accredited third party. Which of the following should be the information security manager's FIRST course of action?

1. A. Request funding needed to resolve the top vulnerabilities.
2. B. Ensure a risk assessment is performed to evaluate the findings. — đáp án hiện tại
3. C. Report findings to senior management.
4. D. Ensure vulnerabilities found are resolved within acceptable timeframes.