Certified in Risk and Information Systems Control (CRISC) — Question 324

Which of the following is the BEST course of action to help reduce the probability of an incident recurring?

Answer options

• A. Perform root cause analysis.
• B. Update the incident response plan.
• C. Perform a risk assessment.
• D. Initiate disciplinary action.

Correct answer: A

Explanation

Performing a root cause analysis is essential as it identifies the underlying reasons for the incident, allowing for targeted solutions to prevent recurrence. Updating the incident response plan, conducting a risk assessment, and initiating disciplinary action may address specific aspects but do not directly tackle the root cause of the issue.