CISM Certified Information Security Manager Practice Exams, Second Edition, 2nd Edition

CHAPTER 8

Incident Management Operations

This domain includes questions from the following topics:

•  The steps involved in security incident response

•  Incident response tools and techniques

•  Attorney-client privilege

•  Crisis management and communications

•  Post-incident review and reporting

This chapter covers Certified Information Security Manager (CISM) Domain 4, “Incident Management,” part B, “Incident Management Operations.” The entire Incident Management domain represents 30 percent of the CISM examination.

One Supporting Task in the CISM job practice aligns with the Incident Management / Incident Management Operations domain:

37. Conduct post-incident reviews to facilitate continuous improvement, including root-cause analysis, ...