MENU
The CIO of an enterprise learns the payroll server of a competitor has been the victim of ransomware. To help plan for the possibility of ransomed corporate data, what should be the ClO's FIRST course of action?
Suggested Answer: A
Get Premium CGEIT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
RO
Rosio
10 months ago
Backing up data is a must, but what about training staff?
JI
Jin
11 months ago
KRIs are useful, but not the first step here.
NI
Nickolas
11 months ago
Surprised they haven't already had a ransomware policy in place!
NO
Noel
11 months ago
I think a targeted risk assessment is more important.
EU
Eun
11 months ago
Definitely need to back up data first!
WI
Wilda
12 months ago
Developing KRIs sounds important, but I wonder if it should come after assessing the current risks. I'm torn between A and C.
FR
Frank
12 months ago
I practiced a similar question where backing up data was emphasized, so I lean towards option D being crucial for immediate action.
SI
Silva
12 months ago
I'm not entirely sure, but I feel like a targeted risk assessment could help identify vulnerabilities, so maybe option C is the way to go?
SH
Shannon
1 year ago
I remember discussing the importance of having a ransomware policy in class, so I think option B makes sense as a first step.
DO
Dominic
1 year ago
I'm feeling pretty confident about this one. The CIO's first step should be to develop a policy to address ransomware, since that will provide the framework for the organization's response and recovery efforts. The other options are important, but they come after establishing the policy.
AN
Andrew
1 year ago
Okay, I've got this. The first thing the CIO should do is request a targeted risk assessment to understand the potential impact of a ransomware attack on the company's systems and data. That will help inform the next steps in developing a policy and response plan.
MA
Marguerita
1 year ago
Hmm, I'm a bit unsure about this one. There are a few options that seem reasonable, but I'm not sure which one is the "first" course of action the CIO should take. I'll need to think this through carefully.
ZA
Zack
1 year ago
This seems like a straightforward question about incident response. I think the key is to focus on the first step the CIO should take, which is likely to assess the risk and plan a response.
AR
Art
1 year ago
I'm feeling a little lost on this one. There are a lot of moving parts to consider, like risk indicators, policies, and data backups. I'll need to review my notes and think through the logical sequence of steps the CIO should take.
AL
Alverta
1 year ago
Hmm, I'm a bit unsure about this one. There are a few options that seem reasonable, like developing a ransomware policy or doing a risk assessment. I'll need to think through the pros and cons of each approach.
LA
Lashaunda
1 year ago
This seems like a straightforward question about incident response planning. I think the key is to focus on the first step the CIO should take, which is likely to assess the risk and develop a plan to address it.
DE
Derick
1 year ago
Okay, I've got this. The first thing the CIO should do is request a targeted risk assessment to understand the specific threats and vulnerabilities the organization faces. That will provide the necessary information to develop an effective ransomware policy and response plan.
JA
Jacqueline
1 year ago
I've seen hex strings like this before, but I'm not sure which encoding method it represents. I'll have to carefully consider the options and see if I can eliminate any of them.
AD
Adell
1 year ago
This is a tricky one, I'll need to think through the different data sources and their priorities carefully.
MI
Mike
1 year ago
The CIO should probably hire a ransomware negotiator - someone who's really good at holding their data for ransom.
RU
Rutha
1 year ago
Wow, ransomware is no joke. I bet the CIO is feeling the pressure right now. D seems like the safest bet, but I'm curious to see if anyone comes up with a witty pun about backing up data. That would really seal the deal for me.
VI
Victor
1 year ago
C) Request a targeted risk assessment.
CA
Carey
1 year ago
B) Develop a policy to address ransomware.
JE
Jeannetta
1 year ago
A) Require development of key risk indicators (KRIs).
MA
Mariko
1 year ago
Hold up, what about C? A targeted risk assessment could help the CIO identify vulnerabilities and plan accordingly. Might be worth considering, especially since the competitor's server was hit.
JO
Jose
1 year ago
C) Request a targeted risk assessment.
YV
Yvonne
1 year ago
B) Develop a policy to address ransomware.
CA
Casie
1 year ago
A) Require development of key risk indicators (KRIs).
KI
Kiera
1 year ago
I agree, D is the way to go. Backing up data is the first line of defense against ransomware. The other options are good too, but they won't do much if the data is already encrypted.
MI
Micah
1 year ago
Ransomware is a serious threat, and the CIO needs to act quickly. D seems like the best option to protect the company's data in case of an attack.
TO
Tomoko
1 year ago
D) Back up corporate data to a secure location.
VE
Veda
1 year ago
C) Request a targeted risk assessment.
HA
Hassie
1 year ago
B) Develop a policy to address ransomware.
CA
Carlota
1 year ago
A) Require development of key risk indicators (KRIs).
RE
Renea
1 year ago
Backing up corporate data to a secure location should also be a priority to protect against ransomware.
CH
Chantay
1 year ago
I agree with Fernanda. Developing a policy would help prevent future attacks.
FE
Fernanda
1 year ago
I think the CIO should develop a policy to address ransomware first.