Discuss ISC2 CISSP Exam Topic 1 Question 112

A colleague who recently left the organization asked a security professional for a copy of the organization's confidential incident management policy. Which of the following

is the BEST response to this request?

DSubmit the request using company official channels to ensure the policy is okay to distribute.

AEmail the policy to the colleague as they were already part of the organization and familiar with it.

BDo not acknowledge receiving the request from the former colleague and ignore them.

CAccess the policy on a company-issued device and let the former colleague view the screen.

Suggested Answer: D

The best response to the request from a former colleague for a copy of the organization's confidential incident management policy is to submit the request using company official channels to ensure the policy is okay to distribute. The incident management policy is a policy that defines the roles, responsibilities, and procedures for the identification, response, and recovery of the security incidents that may affect the organization. The incident management policy is a confidential document that contains sensitive information and data, and that should be protected from unauthorized access, disclosure, or modification. Submitting the request using company official channels can help to ensure the policy is okay to distribute, as it can verify the legitimacy and validity of the request, and the authorization and clearance of the requester.Submitting the request using company official channels can also help to comply with the security policies and standards, and the legal, regulatory, or contractual requirements of the organization, and to prevent or mitigate any potential security risks or issues that may arise from the distribution of the policy34.Reference:CISSP CBK, Fifth Edition, Chapter 7, page 629;2024 Pass4itsure CISSP Dumps, Question 17.

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Novella 3 months ago

Right! Protecting company info is crucial.

Ettie 3 months ago

I would explain the policy is sensitive and not shareable.

Samira 3 months ago

Agreed. Sharing could lead to security risks.

Abel 4 months ago

Definitely say no. It's confidential!

Vincenza 5 months ago

Wait, they actually asked for that? That's bold!

Keva 5 months ago

I think it's a gray area, but better safe than sorry.

Gearldine 5 months ago

Isn't it a bit odd they asked for it after leaving?

Pamella 6 months ago

I agree, no way they should get that.

Velda 6 months ago

Definitely shouldn't share that! It's confidential.

Kathryn 6 months ago

Ooh, someone's feeling a bit nosy, aren't they? Sorry, but that policy is off-limits. Confidentiality is key in this line of work.

Delila 6 months ago

I'd rather not risk it. Sharing that policy could lead to all sorts of trouble. Better safe than sorry, you know?

Lashandra 6 months ago

Haha, nice try, ex-colleague! You're not getting your hands on that juicy incident policy. Gotta keep those secrets under lock and key.

Justine 6 months ago

Absolutely not! Sharing confidential information with a former employee is a big no-no. That policy is for internal use only.

Verona 7 months ago

I would not share the confidential incident management policy with a former employee. That would be a breach of trust and could put the organization at risk.

Ashton 7 months ago

I studied something similar where the response involved explaining the confidentiality of the document. I think we should definitely avoid sharing it directly.

Francoise 7 months ago

I feel like there might be exceptions for former employees, but I can't recall the exact details. Should we check if there's a formal process for these requests?

Alberta 8 months ago

I remember a practice question about sharing sensitive information, and it emphasized the importance of protecting company policies. I think we should refer the colleague to HR instead.

Bernardine 8 months ago

I think the best response would be to deny the request since it's confidential, but I'm not entirely sure about the specific protocols for handling such situations.

Carin 8 months ago

I'm a bit unsure here. Is there any way we could redact or summarize the key points without sharing the full policy? Might be worth exploring that option.

Eric 8 months ago

This is a no-brainer. The policy is confidential, so we can't disclose it to anyone who no longer works here. Gotta protect that sensitive information.

Deeann 8 months ago

Okay, let's think this through. What are the potential risks and consequences of sharing the policy? I'll need to weigh that against any potential benefits.

Vi 9 months ago

Definitely can't share confidential policies with former employees. That would be a breach of trust and security protocols.

Lashaunda 9 months ago

Hmm, this seems like a tricky one. I'll need to carefully consider the confidentiality and security implications before responding.

Julio 2 months ago

↳ replying to Lashaunda

Definitely! Confidentiality is key in these situations.

Michal 3 months ago

↳ replying to Lashaunda

Agreed! Sharing that info could compromise security.

Rupert 3 months ago

↳ replying to Lashaunda

I think the best response is to deny the request.

ISC2 CISSP Exam - Topic 1 Question 112 Discussion