(ISC)2 Certified in Cybersecurity Practice Exam

What is the objective of a security incident response communication plan?

1. To encrypt data during incidents

2. To outline communication during a security incident

3. To analyze security events

4. To log user access to data

The correct answer is: To outline communication during a security incident

The objective of a security incident response communication plan is to outline communication during a security incident. This plan is essential for ensuring that everyone involved understands their roles, responsibilities, and the protocols for sharing information both internally within the organization and externally with stakeholders, such as law enforcement or the public. Effective communication during a security incident is critical for maintaining situational awareness, coordinating response activities, managing public relations, and ensuring that accurate information is disseminated timely. By having a clear communication plan in place, organizations can minimize confusion and optimize their response efforts, leading to a more efficient resolution of the incident and potentially reducing the impact on the business. The other options focus on aspects that, while important, do not directly relate to the communication strategies required during an incident. Encrypting data during incidents pertains to data protection rather than communication, analyzing security events refers to the post-incident review process, and logging user access to data is a part of data management and security monitoring, not incident communication.