Module 19 CSEC

What is the primary purpose of Incident Response (IR)?

• To create new security policies

• To take organized and careful steps when reacting to a security incident

• To develop software applications

• To train new employees

What is the first step in the sequence of steps involved in Incident Response?

• Implementing new security measures

• Identifying and reporting an incident

• Conducting employee training

• Shutting down all systems

How do IR processes vary between organizations?

• They are the same for all organizations

• They differ according to their business and operating environment

• They depend on the size of the organization

• They are based on the number of employees

What is the role of the Incident Handling and Response Team?

• To develop marketing strategies

• To collectively respond, remediate, mitigate, recover, and communicate the impact of incidents involving computer security breaches

• To manage financial accounts

• To oversee human resources

What does the IH&R team work on when dealing with a security incident?

• A marketing plan

• An incident response plan

• A financial report

• A training manual

Who in the IH&R team is responsible for leadership and decision-making authority?

• Information Security Team

• IT Staff

• Management

• Attorney

Which role in the IH&R team is tasked with discovering and containing incidents?

• Physical Security Staff

• Information Security Team

• Attorney

• IT Staff

Who is responsible for providing legal advice in the IH&R team?

• IT Staff

• Management

• Physical Security Staff

• Attorney

Which team member is aware of the information system and network areas?

• IT Staff

• Attorney

• Management

• Physical Security Staff

Who is responsible for physical security and identifying the extent of any damage in the IH&R team?

• Information Security Team

• Physical Security Staff

• Management

• Attorney