CISM Certified Information Security Manager – Question1427

The PRIMARY objective of performing a post-incident review is to:

A.
identify the root cause.
B. identify control improvements.
C. re-evaluate the impact of incidents.
D. identify vulnerabilities.

Correct Answer: B