MENU
Which of the following should be the PRIMARY basis for a severity hierarchy for information security incident classification?
Suggested Answer: A
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
VA
Vanna
11 months ago
C is definitely not the primary basis, in my opinion.
BR
Breana
12 months ago
Surprised that people aren't considering D more seriously.
AD
Adolph
12 months ago
I think A is important too, though.
DA
Darrin
12 months ago
Totally agree, adverse effects matter most!
VE
Verlene
1 year ago
B seems like the most logical choice.
JA
Javier
1 year ago
Availability of resources seems less relevant, but I guess it could affect how we respond to incidents. I need to think this through more.
KI
Kimberlie
1 year ago
I feel like legal and regulatory requirements could play a big role too, but I’m leaning towards business impact as the main factor.
LI
Lilli
1 year ago
I'm not entirely sure, but I remember something about root cause analysis being important. It might help prioritize incidents.
LA
Lawrence
1 year ago
I think the primary basis should be the adverse effects on the business. That seems to align with what we practiced in class.
DY
Dylan
1 year ago
The part about needing to click to identify the control selector in SAP is interesting. I'll make a note of that, as it could be an easy mistake to make.
MI
Milly
1 year ago
Alright, I think I've got a handle on this. The key is recognizing that Cloud Service A is acting as both a cloud service and a cloud service consumer, so it forms a dependency on Cloud Service B. I'll need to calculate the combined availability based on that dependency.
JE
Jettie
1 year ago
I feel pretty confident about this one. Project metrics are all about measuring the success and efficiency of a project, so the decrease in those three factors would all be good examples. D is the way to go.
JO
Johnathon
1 year ago
This feels like a practice question we went over, but I get mixed up about the certificate authority stuff. It might be the first option, but I'm not confident.
MI
Micheal
1 year ago
This question seems straightforward, I think I can handle it.