Utilize Effective Communication Strategies to Convey Cybersecurity Risks. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   After a cybersecurity awareness campaign, an organization wants to improve future communications. Which approach best establishes a feedback loop?

   • AReview the campaign's email open rates and click-through rates.
   • BConduct a follow-up survey asking employees what they understood and what was unclear.
   • CCompare the number of reported phishing emails before and after the campaign.
   • DAssume the campaign was effective because no complaints were received.
   Reveal Solution Discussion Select an answer first
2. 17expert · medium

   A healthcare organization needs to communicate a new cybersecurity risk to its physicians, who are busy and have limited time. The risk requires them to change how they access patient records. What is the most effective communication method?

   • AA brief, targeted presentation at a staff meeting, focusing on the required change and its impact on patient care.
   • BA mandatory online training module that takes 30 minutes to complete.
   • CA detailed email with the full risk assessment and technical details.
   • DA memo placed in each physician's mailbox.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How does effective risk communication support the integration of cybersecurity into organizational decision-making?

   • ABy keeping cybersecurity risks confidential to avoid alarming stakeholders
   • BBy providing decision-makers with the information they need to weigh cybersecurity risks against business objectives
   • CBy automating all risk assessments so that human judgment is not required
   • DBy ensuring that all cybersecurity risks are eliminated before any business decision is made
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   An organization's security awareness program has been running for a year. The team wants to improve the program based on feedback. Which approach is most effective for gathering actionable feedback?

   • AAnalyze phishing simulation click rates to identify which employees need more training.
   • BConduct focus groups with employees from different departments to discuss their understanding and suggestions.
   • CCompare the program's metrics with industry benchmarks.
   • DReview the number of security incidents reported by employees.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of ensuring 'clarity' in cybersecurity risk communication?

   • ATo provide a complete list of all technical vulnerabilities and their CVSS scores
   • BTo ensure that all stakeholders receive the same level of detail in every communication
   • CTo make the communication sound more technical and credible to expert audiences
   • DTo reduce the likelihood of misinterpretation by using plain language and avoiding jargon
   Reveal Solution Discussion Select an answer first