An organization has identified an active cyberattack of its internal network. Which of the following considerations is MOST important to the success of the incident response?

The correct answer is D. Communication to stakeholders is conducted through a separate channel. During an active attack, the organization must assume normal communication channels (email, chat, internal voice) may be monitored or disrupted by the attacker. Using a separate, out-of-band channel is most critical to coordinate response securely and effectively.

Submitted by noor.lb· Apr 18, 2026Information Security Incident Management

Question

Options

AThe data loss prevention (DLP) tool is functioning properly.
BContact details for forensics support are readily available.
CThe recovery time objective (RTO) can be met.
DCommunication to stakeholders is conducted through a separate channel.

How the community answered

(33 responses)

A
15% (5)
B
9% (3)
C
3% (1)
D
73% (24)

Explanation

During an active attack, the organization must assume normal communication channels (email, chat, internal voice) may be monitored or disrupted by the attacker. Using a separate, out-of-band channel is most critical to coordinate response securely and effectively.

Topics

#Incident Response#Secure Communication#Cyberattack#Communication Strategy

Community Discussion

No community discussion yet for this question.

Full CISM Practice