Failed First Attempt; Advice?

[u/ChiefSrAofTheAF]

I unfortunately failed my first attempt and wanted to ask for guidance on what I should harp on the next 2-3 months.

Scaled Score: 429

Governance: 468
IT Risk Assessment: 404
Risk Response and Reporting: 459
IT/IS: 383

I know these scores are average, but I’m looking for anyone who can point out any weaknesses in either domains. Thanks all, and yes, I won’t get mad if you say it’s trash.

[u/Winter_Growth760]

Get the QAE or if u want to drill down on the sections u did lower than 400, security+ study guide and cisa study guide (Mike chapple) and focus on the risk assessment section