CERTIFIED-IN-CYBERSECURITY Question #516: Real Exam Question with Answer & Explanation

Question

What should be done if one person is unavailable during an emergency?

Options

• ADiligently assign a new decision maker to overcome the situation
• BCall other people on the phone tree
• CContact the emergency services
• DUse the due-care principle

Explanation

Careful designation of a new decision maker is the best approach in an emergency when one person is unavailable. This process ensures continuity and that critical decisions are made quickly and effectively (see the ISC2 Study Guide, Chapter 2, Module 2). An example of this process might be in a cybersecurity company, where if a chief security officer is unavailable during a data breach, the task can fall on the shoulders of the chief cybersecurity engineer or a similar role in the organization's hierarchy. The remaining options are less than ideal strategies in this context. The due care principle emphasizes that a professional's actions should meet the standard of care expected in their profession. However, it's not a direct action to take when someone is unavailable during an emergency. Contacting emergency services is critical in certain situations, but is not a universally applicable or preliminary action when a team member is absent. Finally, calling other people in the phone tree is a method of communication during an incident, but it does not address the need for decision-making when a key person is missing

No community discussion yet for this question.