QUESTIONS
1. _________?is a set of procedures that commence when an incident is detected.
2. __________is a sign that an adverse event is underway and has a probability of becoming an incident.
In an organization, unexpected activities occur periodically; these are referred to as ___________________________
4. A(n) ______________________is a detailed set of processes and procedures that anticipate, detect, and mitigate the effects of an unexpected event that might compromise information resources and assets.
5. ___________________is the process of evaluating the circumstances around organizational events, determining which adverse events are possible incidents (incident candidates) and whether a particular adverse event constitutes an actual incident.
6. The Incident Response Planning team (IRP team), should consist of individuals from all relevant constituent groups that will be affected by the actions of the frontline response teams
True
False
7. NIST defines a(n) _______________
as "any observable occurrence in a system or network"
8. The Public Relations Department helps InfoSec staff acquire personnel not already on hand to complete the CSIRT team.
True
False
9. A(n)-____________________occurs when an incident that deserves attention is not reported.
10. An example of a contradictory policy would be one that claims data security as a first priority and also requires complete privacy for all stakeholders.
True
False.