Câu 39: Isaca Certified Information Security Manager

Which of the following is MOST important to do after a security incident has been verified?

1. A. Notify the appropriate law enforcement authorities of the incident.
2. B. Follow the escalation process to inform key stakeholders.
3. C. Prevent the incident from creating further damage to the organization. — đáp án hiện tại
4. D. Contact forensic investigators to determine the root cause.