Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
It is already mentioned that it is against the policy, regardless of data classification, then the first thing to do is to contain, therefore block it.
Irrespective of sensitivity, if it's against company policy, then it's a breach. For a breach 1st step is containment (A). Second step will be determine the level of exposure and impact. (B).
B. Determine the classification level of the information The information security manager's first course of action should be to determine the classification level of the information that has been shared via the external cloud storage service. Understanding the sensitivity and classification of the information involved is crucial to assess the potential risk and impact of the policy violation. This assessment will guide subsequent steps and decisions, including whether to involve higher management, to block access to the service, or to seek a business justification from the employee. By prioritizing the identification of the information's classification level, the information security manager can ensure that the response is proportional to the level of risk posed by the unauthorized sharing.