Certbie
Question 1 of 30
A multinational financial institution, \"GlobalTrust Finances,\" is implementing ISO 27032:2012 to enhance its cybersecurity framework. They have a complex organizational structure with multiple departments, including IT, security operations, legal, and compliance. GlobalTrust is concerned about effectively managing and responding to cybersecurity incidents. Considering the principles outlined in ISO 27032:2012, which of the following steps is MOST crucial for GlobalTrust to ensure effective incident reporting and escalation within its organization?
Establishing formal, documented procedures that clearly define roles, responsibilities, reporting channels, and escalation paths for cybersecurity incidents across all departments, ensuring incidents are promptly reported to the appropriate stakeholders, including senior management and external parties when necessary.
Relying on informal communication channels and ad-hoc reporting processes to allow for flexibility in incident handling, trusting that employees will use their best judgment to determine the appropriate course of action in each situation, without strict adherence to predefined protocols.
Implementing a centralized incident reporting system managed solely by the IT department, limiting access to incident reports to only IT personnel to maintain confidentiality and prevent unnecessary alarm among other departments and senior management.
Focusing primarily on technical security controls, such as firewalls and intrusion detection systems, assuming that these measures will prevent most incidents from occurring, thereby reducing the need for a comprehensive incident reporting and escalation process.

Preparing for ISO 39001:2012 Lead Implementer? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free