CSIRP Training

What is CSIRP stands for?

• Cyber Security Incident Response Plan

• Cyber Security Incident Regulatory Plan

• Cyber Security Incident Risk Plan

• Cyber Security Immediate Response Plan

Your business email account has been compromised and leaked. What is the first course of action?

• Nothing, it is a responsibility of Group IT

• Change your Outlook password immediately

• Inform the security team of your organization

• Change the Password on all sites where you use the same password and inform the IT Team

Which one is NOT a good password ​management practice?

• Use alphanumeric characters in the password

• Re-use the password for easy to memorize

• Avoid using keyword that can be associated with your ID

• Use a long passphrase

What do you need to do if you see any security incident, abnormalities, or non-compliant behaviour?

• Tell the vendors

• Keep it secret

• Report to Group IT and Incident Response Team ("IRT")

• Post in social media

Fake e-mail message appearing to be from a trusted business, social network or other contact asks for personal information or requests a user to click on a link or attachment so that hackers can secretly collect personal information and data. This act is called?

• Ransomware

• Inside Threats

• Phishing

• Advances persistent Threats

How does malware get onto your computer?

• Email attachments or links

• By visiting unreliable websites

• On USB sticks

• All of the above

Who should know your passwords?

• You & Group IT

• You & Senior Management

• Anyone

• Only You

What should you do if you accidently click on the link/attachment of a phishing email?

• Immediately unplug the network connection

• Immediately shutdown your computer

• Immediately inform IT Team

• All above

You have received a Phishing Email, and already remove the email. Should you report to IT Team?

• No

• Yes

• Maybe

• I don't know

Answer explanation

Report to IT Team so that IT Team can block the email ID address.

What is the hint to tell you that the email is a phishing email?

• An unfamiliar tone or greeting

• Incorrect email address spelling

• Threats or a sense of urgency to reply

• All above