CISM: Certified Information Security Manager

Question

An information security manager has been assigned to develop materials that update the board, regulatory agencies, and the media about a security incident.

Which action should the information security manager take FIRST?

Explanation

Incident communications must be tailored to the intended audience and comply with applicable reporting and disclosure obligations. Determining the needs and requirements of the board, regulators, and media establishes the appropriate content, timing, approval constraints, and communication channels before messages are created or distributed.

CISM: Certified Information Security Manager

AstroTutor

Notes

Readiness

QuestionQ83

Community Discussion