CISM · Question #548
A successful breach of an organization's web application platform was detected and logged in a SIEM platform, but the security team was unaware of the event due to a large number of alerts and the…
The correct answer is D. Establish a 24/7 automated detection and notification process. Establishing a 24/7 automated detection and notification process is the best way to ensure critical events are detected and acted upon promptly, even during off-hours or when alert volumes are high. Automation helps reduce reliance on manual monitoring and improves response…
Question
A successful breach of an organization's web application platform was detected and logged in a SIEM platform, but the security team was unaware of the event due to a large number of alerts and the event occurred during the weekend. Which of the following is the BEST way to improve response to this type of event?
Options
- AImplement an intrusion detection and prevention solution.
- BConfigure the SIEM to ingest all available logs.
- CAdd more security staff to review firewall and SIEM events.
- DEstablish a 24/7 automated detection and notification process.
How the community answered
(29 responses)- A31% (9)
- B7% (2)
- C14% (4)
- D48% (14)
Explanation
Establishing a 24/7 automated detection and notification process is the best way to ensure critical events are detected and acted upon promptly, even during off-hours or when alert volumes are high. Automation helps reduce reliance on manual monitoring and improves response time to high-priority incidents.
Topics
Community Discussion
No community discussion yet for this question.