Assessing Corporate Cybersecurityintermediate
Arrange the steps in the correct chronological order for communicating and escalating a serious assessment finding to senior decision-makers.
Answer
Describe the identified gap or shortfall using objective assessment evidence, Assess the potential business and operational impact, Assign a risk severity rating using the enterprise risk methodology, Log the risk and proposed disposition in the enterprise risk register, Escalate the serious risk to senior leadership for a formal risk decision
Explanation
### The order
1. **Describe the gap or shortfall**: decision-makers need to know what the evidence shows.
2. **Assess potential business impact**: explain what the gap could mean for operations, services, privacy, assets, or reputation.
3. **Assign severity using the enterprise's risk approach**: severity reflects the organization's defined risk categories and policy.
4. **Track the risk and its disposition in a risk register**: record plans and status so the issue does not disappear from view.
5. **Escalate serious risks for a management decision**: senior leaders can authorize mitigation resources or accept the risk.
### The concept
This sequence turns a technical observation into a decision-ready risk. The steps depend on one another: severity is difficult to judge without an impact assessment, and escalation is more useful when the risk and its status are documented.
### Terms
- **Risk register**: a record used to track significant risks and their disposition.
- **Escalation**: bringing a risk to a more senior decision-making level.
### Remember
Evidence comes first, business impact next, then severity, tracking, and a decision.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free