CISM: Certified Information Security ManagerDemo

Question

An employee is discovered using an external cloud-storage service to share corporate information with a third-party consultant, contrary to company policy.

Which of the following should be the information security manager's FIRST action?

A Block access to the cloud storage service
B Determine the classification level of the information
C Seek business justification from the employee
D Inform higher management of a security breach

Explanation

The information’s classification establishes the severity and business impact of the unauthorized sharing. That assessment guides whether immediate containment, incident escalation, management notification, and additional response actions are required.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ869

Community Discussion