Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B is right: Although the organization outsourced the process, the organization is still accountable of the breached data. Therefore, it should activate its own IR plan and, which should include IR activities with the vendor together.
B. Referring to the organizations plan might be to notify the outsourcer or the incident.
Even though you notify the third party in this case. Who else will be involved and the communication plan, what next everything is documented in org's IR policy.