CISM: Certified Information Security ManagerDemo

Question

Which of the following is the GREATEST concern caused by the absence of severity criteria in incident classification?

A The service desk will be staffed incorrectly.
B Timely detection of attacks will be impossible.
C Statistical reports will be incorrect.
D Escalation procedures will be ineffective.

Explanation

Severity criteria provide the basis for assigning urgency and impact, which determines when and to whom an incident must be escalated. Without defined severity levels, incidents may follow inconsistent or inappropriate escalation paths, rendering escalation procedures ineffective.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ128

Community Discussion