CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ96

Incident Management

What is an information security manager’s BEST course of action upon discovering a potential business breach in a critical business system?

  • A Update the incident response plan.
  • B Inform affected stakeholders.
  • C Inform IT management.
  • D Implement mitigating actions immediately.
Explanation

A potential breach affecting a critical business system should be contained or mitigated immediately to limit unauthorized access, data loss, service disruption, and further business impact. Notification and plan maintenance are important subsequent activities but must not delay urgent protective action.

Community Discussion

No comments yet. Be the first to start the discussion!