The internal audit activity completed an initial risk analysis of the organization's data storage center and found several areas of concern. Which of the following is the most appropriate next step?
A) Risk response.
B) Risk identification.
C) Identification of context.
D) Risk assessment.

Question

Quizplus · Accepted Answer

After identifying areas of concern, the next step is to conduct a risk assessment to evaluate the significance and impact of the identified risks.

The Internal Audit Activity Completed an Initial Risk Analysis of the Organization's