A Chief Information Security Officer received a list of high, medium, and low impact audit findings. Which of the following represents the BEST course of action?

Question

Options

• AIf the findings impact regulatory compliance, try to apply remediation that will address the most
• BIf the findings do not impact regulatory compliance, remediate only the high and medium risk
• CIf the findings impact regulatory compliance, remediate the high findings as quickly as possible.
• DIf the findings do not impact regulatory compliance, review current security controls.

• A
  11% (6)
• B
  4% (2)
• C
  79% (44)
• D
  7% (4)

No community discussion yet for this question.