▲ 3 r/cism
Question from CISM QAE Db
I am a little bit confused about this question & I need input, please. The question is specific for when developing an IS strategy. Thinking the ISACA way and most importantly as a manager, one would assume that the logical answer would be B. The possible responses for A and B are out. I was thinking that C is out as well. The only possible answer would be B. The step of being compliant w/ legal and regulatory constrains precedes and sets the bar for the risk response, in this case the decision was to mitigate against that risk. I am a bit confused.
u/wbee13 — 14 days ago