8. Incident Response & Management

Try these first

1. 1.

   What does a cybersecurity incident compromise?

   Hint

   Think about the main components of information security.

2. 2.

   Name one phase of the incident response lifecycle.

   Hint

   There are six phases in total.

3. 3.

   What constitutes a cybersecurity incident?

   • A violation of security policies
   • A successful phishing attack
   • Both of the above

   Hint

   Consider what types of events could cause security violations.

4. 4.

   True or False: The Incident Response Lifecycle has four phases.

   • True
   • False

   Hint

   Review the list of phases to confirm.

5. 5.

   You are the Incident Manager during a security breach. Outline a detailed response strategy using the incident response lifecycle. What specific actions would you take during each phase?

   Hint

   Structure your answer around the lifecycle phases.

6. 6.

   Analyze the challenges faced by an organization that has just experienced a cybersecurity incident. How could these challenges affect their incident response efforts?

   Hint

   Think about the impact of each challenge on team dynamics and effectiveness.