Incident Management and Response Policy
12 Questions
0 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to Lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

Who is responsible for ensuring that reported security incidents are added to the appropriate incident management system?

  • Incident responders
  • Information security officer (ISO) (correct)
  • CEO
  • On-Call-Engineer (OCE)

What is the first step recommended for reporting a security incident?

  • Inform the On-Call-Engineer (OCE)
  • Report the incident to your manager (correct)
  • Do nothing and wait for the incident to pass
  • Approach the CEO directly

Which role is responsible for addressing the incident at any given point in time?

  • On-Call-Engineer (OCE) (correct)
  • Incident responders
  • Information security officer (ISO)
  • CEO

What does a quick resolution of a security incident require?

<p>Focus and clearly defined responsibilities (C)</p> Signup and view all the answers

Which individual should you approach to report a security incident if your manager is unavailable?

<p>CEO (B)</p> Signup and view all the answers

What requires human intervention to avert disruptions or restore the operational status?

<p>$\text{Irregular and anomalous conditions}$ (C)</p> Signup and view all the answers

What defines Low severity incidents?

<p>Incidents that do not require immediate remediation (A)</p> Signup and view all the answers

Which scenario is considered a Medium severity incident?

<p>Suspicious emails or unusual activity on a staff laptop (A)</p> Signup and view all the answers

What should be done in the case of Internal Malicious Activity involving a 360tf staff member?

<p>Contact the Information Security Officer (ISO) or CEO directly (C)</p> Signup and view all the answers

When should immediate actions be taken according to the text?

<p>For Critical severity incidents where security attack was successful (B)</p> Signup and view all the answers

Who will determine if legal counsel should be involved in critical incidents?

<p>The Information Security Officer (ISO) (B)</p> Signup and view all the answers

What responsibility lies with the person or team handling critical incidents?

<p>Remediate the vulnerability and limit damage (A)</p> Signup and view all the answers

More Like This

Use Quizgecko on...
Browser
Browser