CRISC · Question #25
A cote data center went offline abruptly for several hours affecting many transactions across multiple locations. Which of the to" owing would provide the MOST useful information to determine mitigati
The correct answer is A. Forensic analysis. Root cause analysis is the most useful activity for determining effective mitigating controls after an incident, as it identifies the fundamental reason for the outage. Understanding the root cause allows for targeted and effective control implementation to prevent recurrence.
Question
A cote data center went offline abruptly for several hours affecting many transactions across multiple locations. Which of the to" owing would provide the MOST useful information to determine mitigating controls?
Options
- AForensic analysis
- BRisk assessment
- CRoot cause analysis
- DBusiness impact analysis (BlA)
How the community answered
(28 responses)- A71% (20)
- B14% (4)
- C4% (1)
- D11% (3)
Why each option
Root cause analysis is the most useful activity for determining effective mitigating controls after an incident, as it identifies the fundamental reason for the outage. Understanding the root cause allows for targeted and effective control implementation to prevent recurrence.
A risk assessment identifies potential risks and their likelihood/impact *before* an incident occurs, but after an incident, RCA is needed to understand the specific failure that materialized.
A Business Impact Analysis (BIA) quantifies the financial and operational impacts of an outage, helping prioritize recovery efforts, but it doesn't explain *why* the outage occurred or how to prevent it, which is crucial for determining mitigating controls.
Concept tested: Post-incident analysis for control improvement
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/incident-response#phase-4-eradication-and-recovery
Topics
Community Discussion
No community discussion yet for this question.