Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Anyone who thinks you should notify senior leadership first has clearly never worked in incident response. What are senior leadership going to do when you tell them? They're gonna ask why you haven't isolated the affected device(s) yet. They're gonna ask what you've already done to contain the situation. If the answer is "nothing, I called you first", that's a good way to end up in the unemployment line
"What are senior leadership going to do when you tell them?"..ouch, that was a nasty slap lool
Ransomware is a severe issue. It is prudent to isolate the affected systems first, and THEN notify senior management.