Câu 221: Isaca Certified Information Security Manager

Which of the following should an information security manager do FIRST upon learning that some security hardening settings may negatively impact future business activity?

1. A. Document a security exception.
2. B. Reduce security hardening settings.
3. C. Perform a risk assessment. — đáp án hiện tại
4. D. Inform business management of the risk.