An enterprise has identified potential environmental disasters that could occur in the area where its data center is located. Which of the following should be done NEXT?
Correct Answer: B
An enterprise that has identified potential environmental disasters that could occur in the area where its data center is located should next assess the likelihood and impact on the data center, because this would help to evaluate the level of risk and prioritize the appropriate risk response strategies. The likelihood and impact assessment should consider the frequency, severity, duration, and scope of the potential disasters, and the potential consequences for the data center's availability, integrity, confidentiality, and performance12.
References := ISACA, CGEIT Review Manual, 7th Edition, 2019, page 75-76.