exam questions

Exam CISM All Questions

View all questions & answers for the CISM exam

Exam CISM topic 1 question 944 discussion

Actual exam question from Isaca's CISM
Question #: 944
Topic #: 1
[All CISM Questions]

An organization experienced a data breach that affected many of its clients. Legal counsel found out about this event only after a press release was issued. Which of the following would have been MOST helpful in preventing this situation?

  • A. A gap analysis of technical controls
  • B. Regular information security policy reviews
  • C. Tabletop testing of the incident response plan
  • D. A comprehensive business continuity plan (BCP)
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Soleandheel
1 month, 2 weeks ago
C. Tabletop testing of the incident response plan......The IRP will contain the communication plan which helps address the issue in the Tabletop exercise.
upvoted 2 times
...
richck102
2 months, 3 weeks ago
Selected Answer: C
C. Tabletop testing of the incident response plan
upvoted 1 times
...
oluchecpoint
4 months ago
Selected Answer: C
Tabletop testing of the incident response plan involves simulating various security incidents, including data breaches, to evaluate the effectiveness of the organization's response procedures. This type of exercise helps identify gaps in communication and coordination among different teams, including legal counsel. By conducting tabletop exercises, an organization can ensure that legal counsel is informed and involved in the incident response process in a timely manner, potentially preventing the situation described in the question.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago