What is an example of two-factor authentication?

Which action will be performed as part of the ‘information security incident review’ of the ‘information security incident management’ process, after a server has been compromised?

An organization has a small information security team. This team evaluates all changes to decide if there might be a security impact, and this evaluation is a significant bottleneck for the organization, resulting in delays that slow down the rate of business change.

What should the organization do to manage this issue?

A board of a large organization is considering certification of the organization’s information security management system to an internal standard. The board expects the certification to help retain and attract customers and reach new markets. CISO and information security managers estimated the costs of certification and necessary preparations and think that some requirements of the standard are too expensive to meet compared to the risks they address.

What is the BEST course of action for the organization in this situation?

An organization has a public website where customers can make purchases. The website has daily automated vulnerability assessments to make sure that is protected from known attacks, and to detect some types of security breach.

What additional automation should the organization implement to help ensure security incidents are detected quickly?