Certified Information Systems Security Professional CISSP · Free Practice Question Medium
Question 61
Which of the following is the BEST approach to full disclosure in the event of a security breach?
- A Notifying only the affected individuals and not the public or law enforcement
- B Waiting until the breach is fully contained and then informing the relevant parties
- C Notifying the public and law enforcement immediately
- D Keeping the breach a secret until it is no longer a threat
Reveal correct answer
Correct answer: B
Explanation
The correct answer: Waiting until the breach is fully contained and then informing the relevant parties. The incorrect answers: Notifying the public and law enforcement immediately: Immediate disclosure can compromise ongoing efforts to contain the breach, as attackers may become aware of the response and take countermeasures. It is important to first contain the breach and gather accurate information before disclosure. Keeping the breach a secret until it is no longer a threat: Withholding information about a security breach can lead to legal and ethical issues, as well as loss of trust from customers and stakeholders. Transparency is essential for maintaining trust and helping affected parties protect themselves. Notifying only the affected individuals and not the public or law enforcement: While it is crucial to inform affected individuals, not notifying law enforcement can hinder investigation efforts and potentially obstruct justice. Moreover, public disclosure may be required by law and helps organizations maintain transparency and trust.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
