What do employees need to know to report a security incident?

Question

Options

• AHow to report an incident and to whom.
• BWhether the incident has occurred before and what was the resulting damage.
• CThe measures that should have been taken to prevent the incident in the first place.
• DWho is responsible for the incident and whether it was intentional.

• A
  92% (35)
• C
  5% (2)
• D
  3% (1)

Explanation

Option A is correct because effective incident reporting requires employees to know two practical things: the process for reporting (how) and the right person or team to contact (whom) - without this, incidents go unreported or get lost. Option B is irrelevant at the point of reporting; historical context and damage assessment are for investigators, not the employee witnessing the incident. Option C describes prevention, which is important training but not what's needed in the moment of reporting an active incident. Option D shifts focus to blame and intent, which is a matter for post-incident investigation, not the employee's reporting responsibility.

Memory tip: Think of A as the "911 call" model - when you see an emergency, you need to know how to call and who to call, not the history of past fires or who started it.

No community discussion yet for this question.