Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The auditor must verify whether the alerts truly lacked actionable intelligence or if they were improperly closed without thorough investigation. By analyzing the closed alerts, the auditor can: i.Identify potential false negatives or missed threats. ii.Assess whether the process for handling alerts is adequate and effective. iii.Determine if systemic issues exist, such as poor threat intelligence integration or inadequate training.
option A only addresses the immediate concern, however, option C is the BEST way to address the situation.
There might me some risks not resolved. You need to ivestigate further before enhancing policies and awareness.