312-39V2: Certified SOC Analyst v2

Question

Sarah Chen is a Level 1 security analyst on the Security Operations Center (SOC) team at Centex Healthcare, a regional hospital network. The SOC team has identified a potential data breach involving unauthorized access to patient records. Multiple departments require continual updates: Legal must assess HIPAA compliance implications, HR must coordinate staff-training responses, and the managed security service provider needs technical details to help with containment. Which role would effectively act as the central communication point among all of these stakeholders?

Explanation

An Incident Manager directs the incident-management process, coordinates internal and external response participants, and provides consistent status, escalation, and technical-information flows to stakeholders. This central role enables Legal, HR, and the managed security service provider to receive the information needed for compliance assessment, workforce actions, and containment. NIST SP 800-61r3 identifies incident coordination as communication of current and planned response activities among internal and external parties with incident-response roles and responsibilities.

Learn more

NIST SP 800-61r3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management

312-39V2: Certified SOC Analyst v2

AstroTutor

Notes

Readiness

QuestionQ34

Community Discussion