4.1 Responding to an incident

What should each member of the incident response team be aware of during a cyber security incident?

• Their specific roles and responsibilities

• The attacker's identity

• The latest cyber security news

• The company's annual revenue

Why is it important to maintain a list of key contacts during a cyber security incident?

• To ask for personal favors

• To invite them to company events

• To ensure timely assistance and support in handling the incident

• To send them holiday greetings

What is the purpose of having well-defined incident response procedures?

• To increase the company's stock value

• To ensure a structured and systematic approach to incident response

• To make the document look official

• To impress potential investors

Why is it crucial to understand the extent of a cyber security incident?

• To plan a company retreat

• To calculate employee bonuses

• To decide on the office lunch menu

• To determine the appropriate response actions

What is the immediate goal of containing a cyber security incident?

• To redesign the company logo

• To schedule team-building activities

• To create a new marketing strategy

• To prevent the spread of the incident and limit potential damage

What does eradicating the incident involve?

• Launching a new product line

• Redecorating the office

• Hiring new staff

• Identifying and removing any malicious presence from affected systems

How can the impact of the incident on operations and stakeholders be reduced?

• By taking a company-wide vacation

• By implementing measures to mitigate the impact

• By increasing advertising spend

• By organizing a company picnic

What is involved in recovering from the incident?

• Changing the company name

• Restoring affected systems, data, and services to normal operation

• Moving to a new office location

• Starting a new business

Why is it important to confirm that the system is functioning normally after an incident?

• To ensure the incident has been successfully resolved

• To prepare for the next company party

• To decide on new employee benefits

• To plan the next fiscal year's budget

What is the ultimate goal of following these cyber security incident response procedures?

• To increase employee vacation days

• To win a cybersecurity award

• To get media attention

• To ensure a swift recovery while minimizing disruptions to business operations