Assessing Corporate Cybersecurityintermediate
Order the steps for analyzing and classifying a security incident against the CIA triad, from the initial event description to the final classification.
Answer
Identify the specific event and what happened to the system or data, Analyze whether data was disclosed, modified, or rendered inaccessible, Map each identified effect to confidentiality, integrity, or availability, Document all applicable CIA triad impacts for the incident
Explanation
### The order
1. Identify what happened to the information or service. You need a clear description of the event before classifying it.
2. Check whether information was exposed, changed, or made inaccessible. These effects distinguish the principal types of security harm.
3. Map each observed effect to confidentiality, integrity, or availability. Exposure maps to confidentiality, changes to integrity, and loss of access to availability.
4. Record multiple goals when the incident has multiple effects. One incident can affect more than one goal.
### Terms
- **CIA triad**: Confidentiality, Integrity, and Availability. The three goals used to classify information-security effects.
### Remember
Classify observed effects one by one; do not assume an incident has only one impact.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free