212-89 · Question #138
Ross is an incident manager (IM) at an organization, and his team provides support to all users in the organization who are affected by threats or attacks. David, who is the organization's internal…
The correct answer is B. Identify and report security loopholes to the management for necessary action. In the context of an incident response team, the role of an internal auditor like David includes identifying, evaluating, and reporting on information security risks and vulnerabilities within the organization. His responsibility is to ensure that the organization's security…
Question
Ross is an incident manager (IM) at an organization, and his team provides support to all users in the organization who are affected by threats or attacks. David, who is the organization's internal auditor, is also part of Ross's incident response team. Which of the following is David's responsibility?
Options
- AConfigure information security controls.
- BIdentify and report security loopholes to the management for necessary action.
- CCoordinate incicent containment activities with the information security officer (ISO).
- DPerform the- necessary action to block the network traffic from the suspectoc intruder.
How the community answered
(35 responses)- A6% (2)
- B89% (31)
- C3% (1)
- D3% (1)
Explanation
In the context of an incident response team, the role of an internal auditor like David includes identifying, evaluating, and reporting on information security risks and vulnerabilities within the organization. His responsibility is to ensure that the organization's security controls are effective and to identify any security loopholes that could be exploited by attackers. Once identified, he reports these vulnerabilities to management so that they can take the necessary actions to mitigate the risks. This role is critical in maintaining the organization's overall security posture and ensuring compliance with relevant laws, regulations, and policies.
Topics
Community Discussion
No community discussion yet for this question.