ExamGecko
Question list
Search
Search

Related questions











Question 721 - CISA discussion

Report
Export

Which of the following is the MOST important consideration when developing tabletop exercises within a cybersecurity incident response plan?

A.
Ensure participants are selected from all cross-functional units in the organization.
Answers
A.
Ensure participants are selected from all cross-functional units in the organization.
B.
Create exercises that are challenging enough to prove inadequacies in the current incident response plan.
Answers
B.
Create exercises that are challenging enough to prove inadequacies in the current incident response plan.
C.
Ensure the incident response team will have enough distractions to simulate real-life situations.
Answers
C.
Ensure the incident response team will have enough distractions to simulate real-life situations.
D.
Identify the scope and scenarios that are relevant to current threats faced by the organization.
Answers
D.
Identify the scope and scenarios that are relevant to current threats faced by the organization.
Suggested answer: D

Explanation:

The most important consideration when developing tabletop exercises within a cybersecurity incident response plan is to identify the scope and scenarios that are relevant to current threats faced by the organization, as this will ensure that the exercises are realistic, meaningful, and effective in testing and improving the incident response capabilities12.The scope and scenarios should reflect the organization's risk profile, business objectives, and operational environment, and should cover a variety of potential incidents that could impact the organization's assets, operations, and reputation34.

Reference

1: Cybersecurity Incident Response Exercise Guidance - ISACA2: Cybersecurity Tabletop Exercises: Everything You Ever Wanted to Know3: CISA Tabletop Exercise Package4: Boost Your Incident Response Plan with Tabletop Exercises

asked 18/09/2024
Patrick Thiel
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first