Exam CISM topic 1 question 949 discussion

Actual exam question from Isaca's CISM

Question #: 949
Topic #: 1

After a ransomware incident, an organization's systems were restored. Which of the following should be of MOST concern to the information security manager?

A. The service level agreement (SLA) was not met.
B. The recovery time objective (RTO) was not met.
C. The root cause was not identified.
D. Notification to stakeholders was delayed.

Show Suggested Answer

Suggested Answer: C 🗳️

by oluchecpoint at Sept. 11, 2023, 8:23 p.m.

Comments

Submit Cancel

richck102

8 months, 3 weeks ago

Selected Answer: C

C. The root cause was not identified.

upvoted 2 times

...

C. The root cause was not identified. Identifying the root cause of the ransomware incident is of utmost importance. Understanding how the ransomware entered the organization's systems and what vulnerabilities or weaknesses were exploited is critical for preventing similar incidents in the future. Without identifying the root cause, the organization may remain vulnerable to further attacks, making it the top concern for the information security manager.

upvoted 2 times

...