Cybersecurity: Minimizing Your Risk

Cybersecurity incidents typically only involve less than 50,000 people. True or false?

What are the potential costs and effects of a cybersecurity incident? (Select all that apply)

Which of the following are entities that you may contact during incident response (select all that apply)?

How quickly do potential notification obligations begin to regulators and/or individuals?

What information does your legal team need to know to assess obligations to notify potentially impacted individuals and/or regulators (select all that apply)?

All breaches are cybersecurity incidents, but not all cybersecurity incidents are breaches – true or false?

What is the average time to identify a data breach?

What regulatory benefit is achieved by aligning information security to cybersecurity frameworks?

Why should incident communications be managed?

A cross-functional response team should consist of (select all that apply)

Which item is not part of an incident response ‘break glass’ plan?

What is a cybersecurity incident?

Nation-state actors often will target smaller organizations, which best explains why?

Which is the most effective mechanism to mitigate credential compromise?

A malicious incident is the only thing that can give rise to a cybersecurity breach, true or false?

If a user doesn’t visit suspicious sites, has a strong anti-virus, and doesn’t open suspicious email attachments – then they aren’t going to have their machine compromised, true or false?

Which of the following is an offensive attack framework?

What is the most common attack/threat vector for malicious actors?

Which is not a motive for external threat actors?

Which is an actual step in the NIST incident response framework?

Cybersecurity frameworks integrate industry standards and best practices, what best describes why?

Which is not a Cybersecurity framework type?

Which is not a type of risk mitigation strategy?

Which question does not address 3rd Party Risk Management?

What is the purpose of commander’s intent during the course of an incident?