A global financial enterprise has been experiencing a substantial number of information security incidents that...

Requesting an IT security assessment to identify the main security gaps is the IT governance board’s first course of action, as it helps to understand the root causes and the extent of the information security incidents that have affected the enterprise’s business reputation. An IT security assessment can also provide recommendations and best practices for improving thesecurity posture and reducing the risks of future incidents12. References := CGEIT Exam Content Outline, Domain 4, Subtopic B: IT Risk Management, Task 1: Ensure that an IT risk management framework exists to identify, analyze, mitigate, manage, monitor, and communicate IT-related business risk, and that the framework for IT risk management is in alignment with the enterprise risk management (ERM) framework.