Exam ISO-IEC-27035-Lead-Incident-Manager Topic 5 Question 79 Discussion
Actual exam question for PECB's ISO-IEC-27035-Lead-Incident-Manager exam
Question #: 79
Topic #: 5
Question #: 79
Topic #: 5
Scenario 1: RoLawyers is a prominent legal firm based in Guadalajara, Mexico. It specializes in a wide range of legal services tailored to meet the diverse needs of its clients. Committed to excellence and integrity, RoLawyers has a reputation for providing legal representation and consultancy to individuals, businesses, and organizations across various sectors.
Recognizing the critical importance of information security in today's digital landscape, RoLawyers has embarked on a journey to enhance its information security measures. This company is implementing an information security incident management system aligned with ISO/IEC 27035-1 and ISO/IEC 27035-2 guidelines. This initiative aims to strengthen RoLawyers' protections against possible cyber threats by implementing a structured incident response process to provide guidance on establishing and maintaining a competent incident response team.
After transitioning its database from physical to online infrastructure to facilitate seamless information sharing among its branches, RoLawyers encountered a significant security incident. A malicious attack targeted the online database, overloading it with traffic and causing a system crash, making it impossible for employees to access it for several hours.
In response to this critical incident, RoLawyers quickly implemented new measures to mitigate the risk of future occurrences. These measures included the deployment of a robust intrusion detection system (IDS) designed to proactively identify and alert the IT security team of potential intrusions or suspicious activities across the network infrastructure. This approach empowers RoLawyers to respond quickly to security threats, minimizing the impact on their operations and ensuring the continuity of its legal services.
By being proactive about information security and incident management, RoLawyers shows its dedication to protecting sensitive data, keeping client information confidential, and earning the trust of its stakeholders.
Using the latest practices and technologies, RoLawyers stays ahead in legal innovation and is ready to handle cybersecurity threats with resilience and careful attention.
Based on scenario 1, which information security principle was breached?
Recognizing the critical importance of information security in today's digital landscape, RoLawyers has embarked on a journey to enhance its information security measures. This company is implementing an information security incident management system aligned with ISO/IEC 27035-1 and ISO/IEC 27035-2 guidelines. This initiative aims to strengthen RoLawyers' protections against possible cyber threats by implementing a structured incident response process to provide guidance on establishing and maintaining a competent incident response team.
After transitioning its database from physical to online infrastructure to facilitate seamless information sharing among its branches, RoLawyers encountered a significant security incident. A malicious attack targeted the online database, overloading it with traffic and causing a system crash, making it impossible for employees to access it for several hours.
In response to this critical incident, RoLawyers quickly implemented new measures to mitigate the risk of future occurrences. These measures included the deployment of a robust intrusion detection system (IDS) designed to proactively identify and alert the IT security team of potential intrusions or suspicious activities across the network infrastructure. This approach empowers RoLawyers to respond quickly to security threats, minimizing the impact on their operations and ensuring the continuity of its legal services.
By being proactive about information security and incident management, RoLawyers shows its dedication to protecting sensitive data, keeping client information confidential, and earning the trust of its stakeholders.
Using the latest practices and technologies, RoLawyers stays ahead in legal innovation and is ready to handle cybersecurity threats with resilience and careful attention.
Based on scenario 1, which information security principle was breached?
Suggested Answer: A Vote an answer
Comprehensive and Detailed Explanation From Exact Extract:
The three fundamental principles of information security are commonly known as the CIA Triad:
Confidentiality, Integrity, and Availability. ISO/IEC 27035 defines an information security incident as a single or a series of unwanted or unexpected information security events that have a significant probability of compromising business operations and threatening information security.
In the provided scenario, RoLawyers experienced a cyber-attack in which their online database was overwhelmed by malicious traffic (likely a Denial-of-Service or DoS-type attack), which caused the system to crash and became inaccessible to employees for several hours. As a result, the employees were unable to access critical legal data and client information necessary for daily operations.
According to ISO/IEC 27035-1:2016, "Availability refers to the property of being accessible and usable upon demand by an authorized entity." (Ref: ISO/IEC 27000:2018, Clause 3.7.3). The scenario clearly reflects a breach in availability since authorized users (employees) were unable to access systems or data when needed.
There was no mention of unauthorized disclosure (which would affect confidentiality) or data alteration (which would affect integrity). Therefore, the primary principle that was violated in this incident is Availability.
This type of incident aligns with the definition and consequences outlined in the ISO/IEC 27035-1:2016 and ISO/IEC 27001:2022 standards, which identify availability loss as one of the main risks to be managed through an incident management process.
Reference Extracts from ISO/IEC Standards:
* ISO/IEC 27000:2018, Clause 3.7.3 - "Availability: property of being accessible and usable upon demand by an authorized entity."
* ISO/IEC 27035-1:2016, Clause 4.1 - "An information security incident can be any event that compromises the confidentiality, integrity or availability of information."
* ISO/IEC 27035-1:2016, Clause 5.1 - "Maintaining availability is critical to service continuity and information assurance." Therefore, the correct answer is A: Availability.
The three fundamental principles of information security are commonly known as the CIA Triad:
Confidentiality, Integrity, and Availability. ISO/IEC 27035 defines an information security incident as a single or a series of unwanted or unexpected information security events that have a significant probability of compromising business operations and threatening information security.
In the provided scenario, RoLawyers experienced a cyber-attack in which their online database was overwhelmed by malicious traffic (likely a Denial-of-Service or DoS-type attack), which caused the system to crash and became inaccessible to employees for several hours. As a result, the employees were unable to access critical legal data and client information necessary for daily operations.
According to ISO/IEC 27035-1:2016, "Availability refers to the property of being accessible and usable upon demand by an authorized entity." (Ref: ISO/IEC 27000:2018, Clause 3.7.3). The scenario clearly reflects a breach in availability since authorized users (employees) were unable to access systems or data when needed.
There was no mention of unauthorized disclosure (which would affect confidentiality) or data alteration (which would affect integrity). Therefore, the primary principle that was violated in this incident is Availability.
This type of incident aligns with the definition and consequences outlined in the ISO/IEC 27035-1:2016 and ISO/IEC 27001:2022 standards, which identify availability loss as one of the main risks to be managed through an incident management process.
Reference Extracts from ISO/IEC Standards:
* ISO/IEC 27000:2018, Clause 3.7.3 - "Availability: property of being accessible and usable upon demand by an authorized entity."
* ISO/IEC 27035-1:2016, Clause 4.1 - "An information security incident can be any event that compromises the confidentiality, integrity or availability of information."
* ISO/IEC 27035-1:2016, Clause 5.1 - "Maintaining availability is critical to service continuity and information assurance." Therefore, the correct answer is A: Availability.
by Lance at Jan 13, 2026, 03:10 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).