Several months ago, your company suffered from a serious information systems security incident, which crippled its production operations for days. As a result, the CSIRT and other managers have seen the need to make a number of changes to a number of information security procedures, including those for incident response and continuity of operations. As CSIRT team chief, they$$ve asked you what else they should consider, and why. Which of the following might you recommend? $($Choose all that apply.$)$

Question $7$ Answer

a$.$

Exercise the new procedures to verify that they work and deliver the improvements we need.

b$.$

Increase our penetration testing activities to see if our new procedures help us detect and respond better.

c$.$

Train the key team members, managers, and leadership on the new procedures.

d$.$

Keep the news about the new procedures very low$-$key; most of our employees don$$t have a need to know about them, and letting them become widely known may inadvertently disclose other vulnerabilities.