QS0030-03: Security Problem and Incident Management Policy

Question 1

QS0030-01: Security Problem and Incident Management Policy

What is a “security breach”?

Answer 1

A security breach is an issue resulting from loss of data confidentiality, system integrity, disruption, or denial of availability from an information system.

Question 2

QS0030-01: Security Problem and Incident Management Policy

What actions MUST be considered in case of a security breach, compromise of credentials, or the discovery of unauthorized access?

Answer 2

Report, escalate and document

Question 3

QS0030-01: Security Problem and Incident Management Policy

How are the emergency and temporary access authorization documented?

Answer 3

Tickets, by a manager

Question 4

QS0030-01: Security Problem and Incident Management Policy

Which policy must all users follow in case of suspicion or confirmation of a security incident?

Answer 4

As defined in the current version of QS0034: Incident Response Plan.