ISOISO 27001Security ControlsEASYFree question
What does the incident management control require?
- A.Assigning each incident to the vendor that supplied the affected product, then closing the ticket and logging the cost
- B.Publishing the incident details to customers, regulators, and the press before the investigation has determined a cause
- C.Rebuilding affected servers from clean images, rotating credentials, and restoring data from the latest backup set
- D.Establishing a consistent and effective approach to managing information security incidents including detection, reporting, assessment, and response
Why D is correct
Incident management controls require a consistent approach covering detection, reporting, assessment, response, and learning from information security incidents.
Know someone studying for ISO 27001? Send them this one.