ExamGecko
Question list
Search
Search

Question 565 - CISM discussion

Report
Export

An internal audit has revealed that a number of information assets have been inappropriately classified. To correct the classifications, the remediation accountability should be assigned to:

A.
the business users.
Answers
A.
the business users.
B.
the information owners.
Answers
B.
the information owners.
C.
the system administrators.
Answers
C.
the system administrators.
D.
senior management.
Answers
D.
senior management.
Suggested answer: B

Explanation:

The best automated control to resolve the issue of security incidents not being appropriately escalated by the help desk is to integrate incident response workflow into the help desk ticketing system. This will ensure that the help desk staff follow the predefined steps and procedures for handling and escalating security incidents, based on the severity, impact, and urgency of each incident. The incident response workflow will also provide clear guidance on who to notify, when to notify, and how to notify the relevant stakeholders and authorities. This will improve the efficiency, effectiveness, and consistency of the incident response process.

Reference= CISM Review Manual, 16th Edition, page 2901; A Practical Approach to Incident Management Escalation2

asked 01/10/2024
Andrey Scherbakov
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first