Câu 341: Isaca Certified Information Security Manager

A risk owner has accepted a large amount of risk due to the high cost of controls. Which of the following should be the information security manager's PRIMARY focus in this situation?

1. A. Conducting an independent review of risk responses
2. B. Establishing a strong ongoing risk monitoring process — đáp án hiện tại
3. C. Presenting the risk profile for approval by the risk owner
4. D. Updating the information security standards to include the accepted risk