Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
R team identifies the need to isolate → contact the business owner to confirm impact and obtain agreement → instruct the system administrator to execute isolation → escalate further if the business impact is material.
Las acciones de contención deben ejecutarse inmediatamente por personal técnico autorizado, antes de cualquier comunicación ascendente.
It's the Business Owner and NOT the system administrator. The Business Owner has the responsibility over his own system and needs to give the direction for next steps. The system administrator is the executing function and can provide technical remediation steps such as blocking the communication from the malicious host. But this needs to be done in conjunction with the Business Owner.