nerdexam
EC-Council

212-89 · Question #138

Ross is an incident manager (IM) at an organization, and his team provides support to all users in the organization who are affected by threats or attacks. David, who is the organization's internal…

The correct answer is B. Identify and report security loopholes to the management for necessary action. In the context of an incident response team, the role of an internal auditor like David includes identifying, evaluating, and reporting on information security risks and vulnerabilities within the organization. His responsibility is to ensure that the organization's security…

Incident Handling and Response Management

Question

Ross is an incident manager (IM) at an organization, and his team provides support to all users in the organization who are affected by threats or attacks. David, who is the organization's internal auditor, is also part of Ross's incident response team. Which of the following is David's responsibility?

Options

  • AConfigure information security controls.
  • BIdentify and report security loopholes to the management for necessary action.
  • CCoordinate incicent containment activities with the information security officer (ISO).
  • DPerform the- necessary action to block the network traffic from the suspectoc intruder.

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    89% (31)
  • C
    3% (1)
  • D
    3% (1)

Explanation

In the context of an incident response team, the role of an internal auditor like David includes identifying, evaluating, and reporting on information security risks and vulnerabilities within the organization. His responsibility is to ensure that the organization's security controls are effective and to identify any security loopholes that could be exploited by attackers. Once identified, he reports these vulnerabilities to management so that they can take the necessary actions to mitigate the risks. This role is critical in maintaining the organization's overall security posture and ensuring compliance with relevant laws, regulations, and policies.

Topics

#incident response team roles#internal auditor responsibilities#IH&R team structure#accountability

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice