Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location PL
Mob_nav_barsMENU

Isaca Exam CISM Topic 1 Question 97 Discussion

Actual exam question for Isaca's CISM exam
Question #: 97
Topic #: 1
[All CISM Questions]

Which of the following is the GREATEST concern resulting from the lack of severity criteria in incident classification?

Show Suggested Answer Hide Answer
Suggested Answer: C

The greatest concern resulting from the lack of severity criteria in incident classification is that escalation procedures will be ineffective because they rely on severity criteria to determine when and how to escalate an incident to higher levels of authority or responsibility, and what actions or resources are required for resolving an incident. Statistical reports will be incorrect is not a great concern because they do not affect the incident response process directly, but rather provide information or analysis for improvement or evaluation purposes. The service desk will be staffed incorrectly is not a great concern because it does not affect the incident response process directly, but rather affects the availability or efficiency of one of its components. Timely detection of attacks will be impossible is not a great concern because it does not depend on severity criteria, but rather on monitoring and alerting mechanisms. Reference: https://www.isaca.org/resources/isaca-journal/issues/2017/volume-5/incident-response-lessons-learned https://www.isaca.org/resources/isaca-journal/issues/2018/volume-3/incident-response-lessons-learned


by Kris at May 04, 2025, 12:23 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Val
5 days ago
That's a valid point, without severity criteria, attacks may go unnoticed for longer.
upvoted 0 times
...
Rex
10 days ago
But what about the impact on timely detection of attacks?
upvoted 0 times
...
Benedict
15 days ago
I'm going with B. If the service desk is staffed incorrectly, the whole system is thrown off. Good luck getting anything done right!
upvoted 0 times
...
Shawn
15 days ago
I agree, incorrect statistical reports can lead to wrong decisions.
upvoted 0 times
...
Val
18 days ago
I think the lack of severity criteria will affect statistical reports.
upvoted 0 times
...
Novella
24 days ago
Hold up, are we talking about incident classification or a game of 'Guess the Severity'? I feel like I should be rolling dice right now.
upvoted 0 times
...
Walton
1 months ago
Wait, so we're supposed to be concerned about the lack of severity criteria? I thought that was just an excuse to skip our incident response training. Oops.
upvoted 0 times
Bonita
4 days ago
C) Escalation procedures will be ineffective.
upvoted 0 times
...
Torie
15 days ago
B) The service desk will be staffed incorrectly.
upvoted 0 times
...
Anastacia
17 days ago
A) Statistical reports will be incorrect.
upvoted 0 times
...
...
Fidelia
2 months ago
D is the way to go. Without clear severity criteria, how can we possibly detect attacks in a timely manner? This is a recipe for disaster!
upvoted 0 times
Francine
8 days ago
D) Timely detection of attacks will be impossible.
upvoted 0 times
...
Shawn
9 days ago
B) The service desk will be staffed incorrectly.
upvoted 0 times
...
Adaline
15 days ago
A) Statistical reports will be incorrect.
upvoted 0 times
...
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77