CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ217

Risk Optimization

Senior management is reviewing the outcomes of a recent security incident with substantial business impact. Which of the following findings is of GREATEST concern?

  • A Response efforts had to be outsourced due to insufficient internal resources.
  • B Significant gaps are present in the incident documentation.
  • C Response decisions were made without consulting the appropriate authority.
  • D The incident was not logged in the ticketing system.
Explanation

Incident-response decisions must involve the designated authority so that actions, risk acceptance, communications, escalation, and any legal or regulatory obligations receive appropriate oversight. Bypassing that authority undermines governance and can lead to unauthorized actions with significant business consequences.

Community Discussion

No comments yet. Be the first to start the discussion!