CISA Certified Information Systems Auditor – Question1043

Which of the following should be done FIRST when handling multiple confirmed incidents raised at the same time?

A.
Categorize incidents by the value of the affected asset.
B. Inform senior management.
C. Update the business impact assessment.
D. Activate the business continuity plan.

Correct Answer: A