Isaca Updated CISM Exam Questions and Answers by maxim

An up-to-date security strategy

Documentation of the threat landscape

Documentation of residual risk

A minimum security baseline

Purchase forensic standard operating procedures.

Provide forensics training to the information security team.

Ensure the incident response policy allows hiring a forensics firm.

Retain a forensics firm prior to experiencing an incident.

ensure alignment with industry encryption standards.

ensure that systems that handle credit card data are segmented.

review industry best practices for handling secure payments.

review corporate policies regarding credit card information.

Isolate affected systems to prevent the spread of damage

Determine the final root cause of the incident

Mitigate exploited vulnerabilities to prevent future incidents

Remove all instances of the incident from the network