CISM Question 221

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C2

  what classification would you give it? how would you base the severity of the incident if you don't know what the risk is? C is the most common sense

• 1

  Conducting a risk assessment is important, but it would happen during the incident response process, not before initiating.

• 2

  Incident classification is one step in an incident response plan. in real world, log an incident ticket is the 1st thing need to do when it happens.