When preventative controls to appropriately mitigate risk are not feasible, which of the following is the MOST important action for the information security manager to perform?

Last Updated on December 21, 2021 by InfraExam

When preventative controls to appropriately mitigate risk are not feasible, which of the following is the MOST important action for the information security manager to perform?

• Assess vulnerabilities.
• Manage the impact.
• Evaluate potential threats.
• Identify unacceptable risk levels.