CISM Incident Management Practice Question

Which incident category involves unauthorized access to systems or data by an individual within the organization?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Insider threat

Insider threat incidents are caused by employees, contractors, or other trusted insiders.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✗
DDoS
Why it's wrong here
DDoS is a denial-of-service attack from external sources.
✗
Data breach
Why it's wrong here
Data breach can be external or internal, but insider threat is specifically internal.
✗
Ransomware
Why it's wrong here
Ransomware is typically external malware.
✓
Insider threat
Why this is correct
Insider threat is the correct category for malicious or accidental actions by insiders.

Go deeper