Who within an organization is accountable for ensuring incident notification and escalation processes are in place?
Suggested Answer: B
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
FR
Frank
11 months ago
Surprised to see so many options, isn't it usually just one person?
SH
Shaunna
12 months ago
Wait, I thought it was the Security operations center management?
LI
Linn
12 months ago
Data owners have a role too, but it's more about oversight.
AL
Almeta
12 months ago
I disagree, senior management should take the lead on this.
SE
Selma
1 year ago
I think it's definitely the Information security manager.
JU
Judy
1 year ago
I’m torn between the information security manager and senior management. I recall them both being mentioned in different contexts regarding incident escalation.
BE
Bernadine
1 year ago
I feel like the data owner should have some responsibility, but I’m leaning towards the security operations center management since they handle incidents directly.
AD
Adria
1 year ago
I think it might be the information security manager, but I’m not entirely sure. We discussed their role in incident response during our last study session.
TH
Thersa
1 year ago
I remember a practice question that mentioned senior management being responsible for overall accountability, but I’m not confident if that applies here.
HE
Helga
1 year ago
Okay, I've got this. To prepare and send a quote, I'd go with B and C - generate a Word template and then export it as a PDF file. That should cover the key requirements.
KI
Kiley
1 year ago
Ah, this is a tricky one. I'll need to review my notes on firewall functionality to make sure I choose the right answer. Gotta be careful with these types of questions.
DA
Dannette
1 year ago
Hmm, this looks like a tricky one. I'll need to carefully read through the options and think about the specific configuration details required for an EoMPLS circuit on a Cisco IOS XR router.
ME
Mendy
1 year ago
I'm a bit confused by this question. The options all seem related to managing credentials, but I'm not sure which one is the best fit for the specific requirement of having different admin access for the CEO's APs. I'll need to review the details of each option more closely.