CISM: Certified Information Security ManagerDemo

Question

Which of the following is MOST likely to be included in a security incident escalation policy?

A Names and telephone numbers of key management personnel
B A severity-ranking mechanism tied only to the duration of the outage
C Sample scripts and press releases for statements to media
D Decision criteria for when to alert various groups

Explanation

A security incident escalation policy establishes decision criteria for when particular groups must be alerted, based on factors such as incident severity, impact, scope, and regulatory or contractual obligations.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ194

Community Discussion