Which of the following should the organization perform NEXT?

An organization is prioritizing efforts to remediate or mitigate risks identified during the latest assessment. For one of the risks, a full remediation was not possible, but the organization was able to successfully apply mitigations to reduce the likelihood of impact.

Which of the following should the organization perform NEXT?
A . Assess the residual risk.
B . Update the organization’s threat model.
C . Move to the next risk in the register.
D . Recalculate the magnitude of impact.

View Answer

Answer: D