Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I would answer B, because the question is not about "FIRST action", but "MOST important course of action".
Typically, similar recurring incidents are transferred to the problem management process, i.e. the incident tickets are assigned to a problem management ticket. There are some similar questions here. This one does not ask about the problem management process, but instead about the first action from the problem management process, namely the root cause analysis. So B. is the most sensible answer.
Q: several similar incidents were logged during the audit period NOT before Answer: C validating whether all incidents have been actioned which will lead to conducting a root cause analysis