You work for a large organization. You notice that you have access to confidential information that you should not be able to access in your position. You report this security incident to the…

The correct answer is C. Threat, Incident, Damage, Recovery. Option C is correct because the security incident cycle follows a logical cause-and-effect sequence: a Threat (a vulnerability or weakness, such as misconfigured access controls) enables an Incident (the security event is triggered and reported, as you did with the helpdesk)…

Information security incident management

Question

You work for a large organization. You notice that you have access to confidential information that you should not be able to access in your position. You report this security incident to the helpdesk. The incident cycle isinitiated. What are the stages of the security incident cycle?

Options

AThreat, Damage, Incident, Recovery
BThreat, Damage, Recovery, Incident
CThreat, Incident, Damage, Recovery
DThreat, Recovery, Incident, Damage

How the community answered

(50 responses)

A
2% (1)
B
2% (1)
C
92% (46)
D
4% (2)

Explanation

Option C is correct because the security incident cycle follows a logical cause-and-effect sequence: a Threat (a vulnerability or weakness, such as misconfigured access controls) enables an Incident (the security event is triggered and reported, as you did with the helpdesk), which leads to Damage (the impact or harm caused by the breach is assessed), followed by Recovery (restoring normal, secure operations).

Options A and B are wrong because they place Damage before the Incident is formally identified - you can't fully assess damage until the incident has been recognized and logged. Option D is wrong because Recovery appears second, before the incident has even been handled or its damage understood - recovery is always the final remediation phase.

Memory tip: Think of the acronym TIDR ("Tider") - like a tide that rises (Threat → Incident → Damage) and then recedes (Recovery). The cycle flows forward logically: something threatens, an event happens, harm results, then you fix it.

Topics

#incident cycle#incident management#threat#recovery

Community Discussion

No community discussion yet for this question.

Full ISFS Practice