Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Reported security incidents represent real, confirmed events that have already bypassed controls and affected operations, mostly reflecting actualized risk than potential or suspected activity. SIEM alerts, IDS events, and malware detections can increase simply due to tuning, false positives and not necessarily due to higher organizational risk.
it is asking negative impact to risk should be B and not A
I think the answer should be B Option A only talks about incidents reported by employees. It doesn't mention if they are True Postive incidents or False positive incidents. So just based on the number of security incidents reported by employees won't affect the risk profile of the organization Whereas option B specifically mentions a malware infection detected by AV which is a true positive event that would definitely affect the risk profile of the organization.