Protection of Information Assets →mediumMultiple ChoiceObjective-mapped

CISA Protection of Information Assets Practice Question

During an audit of the incident management process, the IS auditor finds that tabletop exercises have not been conducted in the past two years. What is the MOST significant risk associated with this finding?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Employees may not know their roles during an incident

Without regular testing, the incident response team may not be prepared to effectively handle a real incident.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The organization may fail to detect an incident in a timely manner
Why it's wrong here
Detection is separate from response; tabletop exercises focus on response.
✗
The organization may not comply with regulatory reporting requirements
Why it's wrong here
Compliance is a concern, but the primary risk is ineffective response.
✗
The incident response plan may be outdated
Why it's wrong here
While possible, the lack of testing is a more direct risk to preparedness.
✓
Employees may not know their roles during an incident
Why this is correct
Tabletop exercises help familiarize team members with their responsibilities.

Go deeper

CISA Protection of Information Assets Practice Question

Why each option matters

Option-by-option breakdown

Related to this question