Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
D. IRT should be the first POC within the organization.
Upon discovering a potential malware infection, the incident response team (IRT) should be contacted first. This team is responsible for evaluating, containing, and mitigating security incidents, as well as coordinating the appropriate response actions. Engaging the incident response team ensures the issue is addressed systematically, minimizing impact and avoiding premature communication that may not yet be warranted.
Tricky qn. as I feel it depends on the culture and expectations of the business you're involved in. In the absence of this info, I'm leaning towards D. Why? Being proactive is part of a broader incident response strategy meaning potential security incidents are managed i.e. contained quickly, effectively, minimizing damage and recovery time. Thinking through IR scenarios ive been in, early assessments, preparation, readiness and good learnings for the IRT were all benefits of situations (confirmed or unconfirmed such as force-majeure).