Câu 83: Isaca Certified Information Security Manager

Which of the following should an information security manager do FIRST to address the risk associated with a new third-party cloud application that will not meet organizational security requirements?

1. A. Restrict application network access temporarily.
2. B. Update the risk register.
3. C. Consult with the business owner. — đáp án hiện tại
4. D. Include security requirements in the contract.