ISACA Certified Information Security Manager Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D3

  When an organization subscribes to a cloud service, it's crucial to have a clear and shared understanding with the cloud service provider about what constitutes a security incident. This agreement helps in establishing a common ground for incident detection, reporting, and response. It ensures that both the organization and the cloud service provider are aligned on what events trigger incident response actions. While the other options (decision on the classification of cloud-hosted data, expertise of personnel providing incident response, implementation of a SIEM) are important aspects of incident management, having a well-defined agreement on the definition of a security incident is foundational for effective collaboration between the organization and the cloud service provider in responding to and mitigating security incidents.

• 1

  Answer is D - Its very important to have a clear and agreed upon definition of a security incident, is crucial for effective incident management and response.

• 1

  D. An agreement on the definition of a security incident