CISSP-ISSMP Incident Handling Process: Decision-Making Stage

Decision-Making Stage

Question

You are an Incident manager in Orangesect.Inc.

You have been tasked to set up a new extension of your enterprise.

The networking, to be done in the new extension, requires different types of cables and an appropriate policy that will be decided by you.

Which of the following stages in the Incident handling process involves your decision making?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A.

Based on the scenario you have described, the stage in the Incident handling process that involves your decision-making is the Preparation stage.

The Preparation stage is the initial phase of the Incident handling process, where the necessary measures are taken to prepare for potential security incidents. This stage involves several activities, such as developing policies and procedures, establishing communication channels, implementing security controls, and conducting training and awareness programs.

In the scenario you have described, the networking setup for the new extension of the enterprise requires different types of cables and an appropriate policy. As the Incident Manager, you will need to make decisions related to the policy for the networking setup, such as what types of cables to use, how they will be installed, how access control will be managed, and how to ensure the confidentiality, integrity, and availability of the network.

Therefore, your decision-making in this scenario will be part of the Preparation stage, as you are taking proactive measures to prevent potential security incidents by implementing appropriate security controls and policies. The other stages in the Incident handling process are Identification, Containment, Eradication, and Recovery, which come into play after a security incident has occurred.