Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Recommend a root cause analysis of the incidents The risk practitioner's FIRST step to address the situation of extended network outages that have exceeded tolerance should be to "A. Recommend a root cause analysis of the incidents." Conducting a root cause analysis is essential to understand the underlying factors contributing to the network outages. Identifying the root causes will enable the organization to implement targeted corrective actions to prevent similar incidents in the future.
A. Recommend a root cause analysis of the incidents The first step a risk practitioner should take when dealing with recurring network outages is to recommend a root cause analysis. This process will help identify the underlying issues causing the outages and provide insight into what controls or changes need to be implemented to prevent future outages. The other options, such as updating the risk tolerance level, recommending additional controls, or updating the risk register, are potentially valid steps, but they should be performed after the root cause analysis has provided more information about the situation.
Correct.