Cyber Security Incident Report Quiz

What is the purpose of including the date in a cyber security incident report?

• To identify the severity of the incident

• To categorize the incident

• To cross-reference with other events

• To describe the incident

What category would an incident fall under if it resulted in severe loss of reputation or financial loss?

• Significant

• Negligible

• Critical

• Minor

What type of attacker(s) refers to a state sponsored attack?

• Single hacker

• Internal

• External

• Government

What does the 'impact of the incident' refer to in a cyber security incident report?

• Cost of recovery

• Purpose of the incident

• Techniques used by the attacker(s)

• Impact on sensitive data and business reputation

What is the response needed if the incident requires reporting to the authorities?

• Report to the police

• Report to software owners

• Report to specialist companies

• All of the above

What should be considered in the future management section of a cyber security incident report?

• Evaluation of the findings

• Review of the incident

• Update of documentation

• All of the above

What should be updated to accommodate the review and evaluation findings in future management?

• Key information

• All of the above

• Procedures

• Policies and controls

What is the purpose of recommendations for changes in future management?

• To identify trends

• To evaluate the findings

• To update documentation

• To improve the plans

What is the target of the incident in a cyber security incident report?

• The organisation

• A particular department

• An employee

• A script kiddie

What was the nature of the incident in a cyber security incident report?

• Impact of the incident

• Type of attacker(s)

• Description of the incident

• Severity of the incident