Month End Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: simple70

Isaca Certified in Risk and Information Systems Control CRISC Question # 493 Topic 50 Discussion

Isaca Certified in Risk and Information Systems Control CRISC Question # 493 Topic 50 Discussion

CRISC Exam Topic 50 Question 493 Discussion:
Question #: 493
Topic #: 50

Which of the following is a risk practitioner's MOST appropriate course of action upon learning that an organization is not compliant with its patch management policy?


A.

Document the concern in an issue tracker.


B.

Strengthen data loss prevention (DLP) controls.


C.

Apply the most recent available patches.


D.

Escalate the issue to the ethics committee.


Get Premium CRISC Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.