CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ381

Risk Optimization

An enterprise has experienced a pattern of sensitive-data breaches. Although every breach has been successfully remediated, leadership is concerned about recurrence. What should the leadership team do FIRST?

  • A Require a root cause analysis be performed.
  • B Contact the appropriate regulatory authorities.
  • C Increase the amount of data breach insurance coverage.
  • D Direct IT to research vulnerability management software solutions.
Explanation

A root cause analysis identifies the underlying process, control, technical, or human factors that allow breaches to recur. Its findings guide effective corrective actions and determine whether measures such as new tools, insurance adjustments, or regulatory notifications are warranted.

Community Discussion

No comments yet. Be the first to start the discussion!