QuestionQ4

Threats, Vulnerabilities, and Mitigations

Which risk management strategy should an enterprise implement first when a legacy application is critical to business operations and preventive controls have not yet been put in place?

Explanation

Risk mitigation reduces either the likelihood or impact of a risk through controls. Implementing the missing preventive controls is therefore the appropriate initial response for a business-critical legacy application.

Community Discussion

No comments yet. Be the first to start the discussion!