q16- Which of the following statements are FALSE regarding the process of managing cyber security incidents? a. Weaknesses that are identified as leading to the incident are remediated during the containment phase. b. The containment phase is concerned with limiting the ongoing damage from the incident. c. An incident report is produced as part of the Lessons Learned phase. d. An event must be classified as an incident before a response is mobilised.

q16- Which of the following statements are FALSE regarding the process of managing cyber security incidents? a. Weaknesses that are identified as leading to the incident are remediated during the containment phase. b. The containment phase is concerned with limiting the ongoing damage from the incident. c. An incident report is produced as part of the Lessons Learned phase. d. An event must be classified as an incident before a response is mobilised.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter11: Security Maintenance

Section: Chapter Questions

Problem 1DQ

See similar textbooks

Similar questions

Which of the following statements are FALSE regarding the process of managing cyber security incidents? a. The containment phase is concerned with limiting the ongoing damage from the incident. b. An incident report is produced as part of the recovery phase.. c. Weaknesses that are identified as leading to d. An event must be classified as an incident before a response is mobilis
State the details of an incident that you have read about (Example: breach due to attack, employee theft of data, etc.) and then use the incident response steps to analyze how you would handle the incident. Be certain to clearly name and define each step (Step 1: Identifying the Incident, etc.).
Submit a security awareness program proposal. It should be a complete, polished artifact containing all of the critical elements. It should reflect the incorporation of feedback . The proposal will consist of the executive summary, communication plan, proposal introduction, policies and procedures, proposed solutions to the security vulnerabilities, and plans to continuously monitor the organization for malicious behaviors.
Susan is the lead investigator for a security incident and realizes that she will not be able to complete her investigation without causing severe disruption to the business. The action she feels she must take exceedsthe authority granted to her under the incident response plan. What should Susan do? a)Shut down all business operations immediately until she develops a plan b)Take the action immediately to protect the business c)Discount the action as a possibility because it exceeds her authority d)Consult with higher levels of management
An incident response (IR) is a collection of operations that are carried out in the course of a catastrophe to anticipate, detect, and resolve the effect on information resources. In this section, we will look at the structure and content of an internal audit plan.
Any organization or business that has had to deal witha cyber breach understands the stress that accompanies the process, no matter how well prepared or rehearsed it is for cyber events. All breaches come with a unique set of challenges and requirements. An incident response team often referred to as an IRT, is a team of individuals who are available, are ready, and have the expertise to investigate a data breach. IRT must understand the full scope of the breach to contain it, which typically includes understanding the entire life cycle of the attack. Forensic specialists can provide valuable information to the rest of the IRT team by examining logs, traffic, and systems to gain insight on the full scope of a breach. Discuss what the forensics investigators need to identify to understand how to scope the data breach incident.
Make sure you submit your proposal for a security education program. Artifacts that have been finished and polished are supposed to have all their parts. The input that was used to create it should be reflected in its final form. The proposal will include an executive summary, a communication plan, an introduction, the proposal's policies and procedures, the proposal's main body, the proposal's main body, the policies and procedures, the recommended remedies to security weaknesses, and the strategies to constantly monitor the company for hostile conduct.
Within incident preparation, the first step is to create a policy for incident response and to get the top management's agreement/approval on the policy. An incident response policy describes the standard methods used by the organization for handling information security incidents. Explain two main benefits of having such a policy prepared and approved.
The definition of an incident varies from organization to organization. From your perspective and individual research, what is the definition of an incident and what needs to have occured in order for a security event to be declared an incident. What is the roles and responsibilities of the Incident Responder?
In the context of information security, a threat is any action or occurrence that might have a negative outcome for a computer system or application that is enabled by a vulnerability.a) Specify the many ways in which computer systems may be compromised.
Research and choose a cyber event from the past two years. Create an assessment to identify all of the risk factors(typically displayed on a low, medium, or high scale) and mechanisms used in the attack. DO NOT simply summarize the event, although a summary can be present in the document. The assessment document is to be a minimum of 700 words. Compile your report (narrative and applicable graphics) into a word document. Please ensure proper citations and reference notes on all material that is not yours. You are allowed to take some liberties and make some assumptions about some facts.
An incident response plan (IRP) is a set of procedures to help an organization detect, respond to, and recover from security incidents. List the roles and responsibilities that are included in an incident response team. Discuss how the organization you analyzed in the Week 4 Discussion can respond to at least 1 cyberattack. Be sure to use the seven phases or steps in the incident response process. Describe the activities that occur in each response process step.