ISO-IEC-27001-LEAD-IMPLEMENTER practice question 7 of 35
Scenario 7: CyTekShield CyTekShield based in Dublin. Ireland, is a cybersecurity consulting provider specializing in digital risk management and…
Choose your answer, then check it against the explanation.
Scenario 7: CyTekShield
CyTekShield based in Dublin. Ireland, is a cybersecurity consulting provider specializing in digital risk
management and enterprise security solutions. After facing multiple security incidents.
CyberTekShield formed expanded its information security team by bringing in Sadie and Niamh as
part of the team. This team is structured into three key divisions: incident response, security
architecture and forensics
Sadie will separate the demilitarized zone from CyTekShield's private network and publicly accessible
resources, as part of implementing a screened subnet network architecture. In addition, Sadie will
carry out comprehensive evaluations of any unexpected incidents, analyzing their causes and
assessing their potential impact. She also developed security strategies and policies. Whereas
Niamh. a specialized expert in forensic investigations, will be responsible for creating records of
different data for evidence purposes To do this effectively, she first reviewed the company's
information security incident management policy, which outlines the types of records to be created,
their storage location, and the required format and content for specific record types.
To support the process of handling of evidence related to information security events. CyTekShield
has established internal procedures. These procedures ensure that evidence is properly identified,
collected, and preserved within the company CyTekShield's procedures specify how to handle
records in various storage mediums, ensuring that all evidence is safeguarded in its original state,
whether the devices are powered on or off.
As part of CyTekShield's initiative to strengthen information security measures, Niamh will conduct
information security risk assessments only when significant changes are proposed and will document
the results of these risk assessments Upon completion of the risk assessment process, Niamh is
responsible to develop and implement a plan for treating information security risks and document
the risk treatment results.
Furthermore, while implementing the communication plan for information security, the
CyTekShield's top management was responsible for creating a roadmap for new product
development. This approach helps the company to align its security measures with the product
development efforts, demonstrating a commitment to integrating security into every aspect of its
business operations.CyTekShield uses a cloud service model that includes cloud-based apps accessed
through the web or an application programming interface (API). All cloud services are provided by
the cloud service provider, while data is managed by CyTekShield This introduces unique security
considerations and becomes a primary focus for the information security team to ensure data and
systems are protected in this environment.CyTekShield uses a cloud service model that includes
cloud-based apps accessed through the web or an application programming interface (API). All cloud
services are provided by the cloud service provider, while data is managed by CyTekShield This
introduces unique security considerations and becomes a primary focus for the information security
team to ensure data and systems are protected in this environment.
Has CyTekShield appropriately addressed the handling of evidence related to information security
events?
Question 7 of 35
Keep practicing
Take the free ISO-IEC-27001-LEAD-IMPLEMENTER practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other ISO-IEC-27001-LEAD-IMPLEMENTER practice questions
- Question 1Scenario 2: Beauty is a well-established cosmetics company in the beauty industry. The co…
- Question 2What category of decision-making does the implementation of an ISMS belong to within an o…
- Question 3During a security audit, analysts discover that an attacker repeatedly queried a black-bo…
- Question 4Who is responsible for ensuring that the ISMS achieves its intended outcomes?
- Question 5Scenario 8: SunDee is a biopharmaceutical firm headquartered in California, US. Renowned …
- Question 6Scenario 2: Beauty is a cosmetics company that has recently switched to an e-commerce mod…
