CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ690

Incident Management

Who should participate in the initial discussions concerning a failed security control?

  • A Penetration testers
  • B The service provider
  • C Senior management
  • D The process owner
Explanation

The process owner is accountable for the affected business process and is best positioned to evaluate the failed control’s impact, determine its cause, and coordinate appropriate remediation.

Community Discussion

No comments yet. Be the first to start the discussion!