CAS-002 · Question #226
The Information Security Officer (ISO) is reviewing a summary of the findings from the last COOP tabletop exercise. The Chief Information Officer (CIO) wants to determine which additional controls…
The correct answer is D. The ISO is assessing the effect of a simulated downtime involving the telecommunication. A COOP tabletop exercise is a discussion-based simulation of a disruption scenario, and this exercise simulated VoIP system unavailability to identify gaps in telecommunication continuity controls.
Question
The Information Security Officer (ISO) is reviewing a summary of the findings from the last COOP tabletop exercise. The Chief Information Officer (CIO) wants to determine which additional controls must be implemented to reduce the risk of an extended customer service outage due to the VoIP system being unavailable. Which of the following BEST describes the scenario presented and the document the ISO is reviewing?
Options
- AThe ISO is evaluating the business implications of a recent telephone system failure within
- BThe ISO is investigating the impact of a possible downtime of the messaging system within
- CThe ISO is calculating the budget adjustment needed to ensure audio/video system
- DThe ISO is assessing the effect of a simulated downtime involving the telecommunication
How the community answered
(30 responses)- A10% (3)
- B3% (1)
- C7% (2)
- D80% (24)
Why each option
A COOP tabletop exercise is a discussion-based simulation of a disruption scenario, and this exercise simulated VoIP system unavailability to identify gaps in telecommunication continuity controls.
This choice implies an actual telephone system failure occurred, but the scenario explicitly states the event was a tabletop exercise - a simulation, not a real incident.
The affected system is VoIP (voice over IP telecommunications), not a messaging system, and the event was a planned simulation rather than a real impact investigation.
Calculating budget adjustments is a financial planning activity unrelated to the purpose of a COOP tabletop exercise, which focuses on identifying operational gaps and control deficiencies.
The scenario describes a COOP tabletop exercise - a structured simulation in which staff discuss responses to a hypothetical outage without causing real disruption. The simulated disruption involved the VoIP system, which is a telecommunication system. The ISO is assessing the simulated impact to identify missing controls, which is precisely the objective of a tabletop exercise under continuity planning frameworks.
Concept tested: COOP tabletop exercise for VoIP continuity assessment
Source: https://csrc.nist.gov/publications/detail/sp/800-84/final
Topics
Community Discussion
No community discussion yet for this question.