BSIT 3-1 - Late Quiz - 7-26-2024

In the context of the incident response plan, what is the primary action to be taken when a security breach is detected?

• Immediately contact law enforcement

• Follow predefined steps in the incident response plan to assess and mitigate the breach

• Notify all employees of the breach

• Disconnect all systems from the network

A retail company discontinues its online sales channel due to high risks associated with data breaches. Which risk control strategy are they using?

(a)  

What is the main objective of a Business Continuity Plan (BCP) in the context of risk management?

• To quickly restore normal operations after a disaster

• To provide comprehensive training for employees on security protocols and procedures

• To ensure that critical business functions continue during and after a catastrophic event

• To implement measures to prevent security incidents

Which of the following best describes the concept of "likelihood" in risk assessment?

• The total number of potential vulnerabilities present within an organization

• The potential severity of damage if a vulnerability is exploited

• The financial cost associated with mitigating a particular vulnerability

• The probability that a specific vulnerability will be the target of a successful attack

Which of the following actions is NOT part of the mitigate control strategy in risk management?

• Creating a Disaster Recovery Plan (DRP)

• Transferring risk to an external service provider

• Implementing a Business Continuity Plan (BCP)

• Developing an Incident Response Plan (IRP)

This risk control strategy focuses on reducing the impact of a vulnerability's exploitation through careful planning and preparation. This strategy involves developing comprehensive plans such as Incident Response Plan, Disaster Recovery Plan, and Business Continuity Plan.

(a)  

This plan details the actions to take after a tragedy to redeem and restore operations. It includes media backup strategies, recovery steps, and measures to limit losses during and after a disaster.

• Business Continuity Plan

• Incident Response Plan

• Disaster Recovery Plan

• Awareness Training Plan

In risk assessment, why is it important to use a consistent rating model for likelihood across all assets and vulnerabilities?

• To simplify the documentation process

• To ensure professional and objective judgment

• To facilitate comparative risk analysis and decision-making

• To align with regulatory requirements

During a risk assessment, you discover that the likelihood of a network attack on a specific asset is highly variable depending on the time of year. Which action would best address this variability in your assessment?

• Adjust the likelihood values seasonally

• Use the average likelihood over the year

• Apply the highest likelihood value observed

• Ignore the variability and use a fixed value

What is the importance of using numeric values for likelihood in risk assessment according to National Institute of Standards and Technology (NIST) Special Publication 800-30?

• To ensure compliance with regulatory standards

• To provide a precise measure of risk impact

• To simplify communication with stakeholders

• To enable quantitative comparison and prioritization of risks