Question 106
Main Page
A critical business system has no backup in place. What is the most appropriate initial risk treatment action?
A. Document the risk as accepted
B. Implement compensating controls immediately
C. Recommend modification by adding backup solutions
D. Purchase additional licensing