Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C. Invoke the established incident response plan. The risk practitioner's FIRST course of action in this situation should be to "C. Invoke the established incident response plan." This plan outlines the steps to be taken in the event of a security incident, breach, or unauthorized disclosure of sensitive information. By invoking the incident response plan, the organization can ensure a coordinated and effective response to the incident. This may involve assessing the extent of the exposure, containing the situation, investigating the root cause, notifying relevant stakeholders, and taking appropriate actions to mitigate the impact. While options A (performing a root cause analysis), B (conducting an immediate risk assessment), and D (informing internal audit) are important actions, they should be part of the incident response process, and invoking the incident response plan is the crucial initial step to ensure a structured and well-coordinated response to the incident.
Agree it is C.
Agree.