During a security program analysis, you discover that the organization's incident response process is slow, leading to extended downtime during cyberattacks. The executive team is concerned about the financial impact of these delays. How would you address this issue to improve the incident response process and minimize downtime in the future?
Response:

• A. Rely solely on external vendors for incident response
• B. Implement a formal incident response plan with clear roles, conduct regular incident response drills, and invest in automated tools to accelerate detection and response
• C. Ignore the delays since no major breaches have occurred
• D. Assign all incident response duties to a single employee to streamline the process

Your organization is undergoing a digital transformation, and you have been tasked with ensuring that the cybersecurity strategy supports the business's new direction. The executive team is concerned that security measures may slow down innovation. How would you align the cybersecurity strategy with the business transformation while addressing these concerns?
Response:

• A. Implement the strictest security controls possible to avoid any potential breaches
• B. Work closely with the business leaders to understand their innovation goals, propose security controls that protect critical assets without hindering innovation, and ensure security is built into the transformation process
• C. Eliminate all security controls to prioritize innovation
• D. Ignore the business transformation and focus solely on traditional security measures

What is the purpose of including a "least privilege" principle in a cybersecurity policy?
Response:

• A. To allow all users to access sensitive data
• B. To ensure that all users have the highest level of access
• C. To restrict users' access to only the resources they need to perform their job duties
• D. To prevent the use of administrative privileges by IT staff

Which of the following is a key step in developing a security program that can scale with business growth?
Response:

• A. Limiting the program to current business requirements
• B. Avoiding investment in new technology
• C. Building flexible policies and controls that can adapt to changing business needs and threats
• D. Creating static policies that will never change

When conducting a business impact analysis (BIA) for a cybersecurity program, what is the key objective?
Response:

• A. Assessing the potential impact of security incidents on business operations and identifying critical processes that must be protected
• B. Defining the least critical business units
• C. Simplifying security processes across all business functions
• D. Identifying which business units should be excluded from security measures