easyMultiple ChoiceObjective-mapped

CISM Practice Question: Based on the exhibit, which role is responsible…

Exhibit

Refer to the exhibit.

Exhibit:

Incident Response Plan - Roles and Responsibilities:
- Incident Response Manager: Coordinates response efforts.
- Technical Lead: Performs technical analysis and containment.
- Legal Counsel: Advises on legal and regulatory obligations.
- Communications Lead: Manages internal and external communications.
- Human Resources: Handles employee-related matters if involved.
- IT Support: Provides technical assistance as needed.

Scenario: A phishing attack has compromised several user credentials. The incident response team has been activated.

Based on the exhibit, which role is responsible for notifying affected users about the phishing attack?

⚠ Common exam trap

ISACA often tests the misconception that the Incident Response Manager handles all communications, but the trap here is that the IR Manager delegates user notification to the Communications Lead to maintain separation of duties and focus on technical containment.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Communications Lead

The Communications Lead is responsible for notifying affected users about the phishing attack because this role manages external and internal communications, including user notifications, during an incident. In the exhibit, the Communications Lead is explicitly assigned the task of 'Notify affected users' under the communication plan, ensuring timely and accurate messaging to reduce further risk.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Technical Lead
Why it's wrong here
The technical lead focuses on analysis and containment.
✗
Legal Counsel
Why it's wrong here
Legal counsel advises but does not typically notify users directly.
✗
Incident Response Manager
Why it's wrong here
The manager coordinates but does not directly communicate with users.
✓
Communications Lead
Why this is correct
The communications lead handles internal and external communications.

Go deeper

CISM Practice Question: Based on the exhibit, which role is responsible…

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question