CISM Incident Management Practice Question
An organization is preparing for a potential supply chain incident. According to CISM best practices, which THREE elements should be included in the supply chain incident playbook? (Select THREE.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Procedures for isolating affected systems and networks.
Supply chain incidents require specific procedures for vendor coordination, technical response, and communication.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A step-by-step guide for paying ransoms to cybercriminals.
Why it's wrong here
Paying ransom is not a recommended best practice and should not be standard procedure.
- ✓
Procedures for isolating affected systems and networks.
Why this is correct
Containment is a key step in any incident response.
- ✗
A list of approved vendors for DDoS mitigation services.
Why it's wrong here
DDoS is a different incident category; supply chain incidents focus on third-party compromise.
- ✓
Communication templates for notifying affected partners and customers.
Why this is correct
Supply chain incidents often involve multiple parties.
- ✓
Instructions for contacting the organization's legal counsel.
Why this is correct
Legal counsel is needed due to contractual and liability issues.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISM question from scratch — 871 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISM exam.