Which of the following should be the FIRST course of action?

exams CISA V1 CISA exam 0 Comments

A data breach has occurred due lo malware .

Which of the following should be the FIRST course of action?
A . Notify the cyber insurance company.
B. Shut down the affected systems.
C. Quarantine the impacted systems.
D. Notify customers of the breach.

Answer: C