Incident Communications GCIL Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the key challenge when communicating technical incident details to non-technical stakeholders?

   • ASimplifying the information without losing accuracy or important context
   • BEnsuring that all technical terms are used correctly
   • CKeeping the information secret from non-technical stakeholders
   • DMaking the information as detailed as possible
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A utility company is developing an incident communication plan for a potential cyber-attack on its SCADA systems. The plan must ensure that the control room operators receive immediate alerts, the executive team receives a summary within 15 minutes, and the public is informed only if there is a risk to safety. Which element is essential for this plan?

   • AA single communication channel for all stakeholders to simplify the process.
   • BA requirement to communicate all details to the public as soon as possible.
   • CPredefined escalation triggers that specify when to notify executives and when to issue a public statement.
   • DA policy to wait for full confirmation of the attack before any communication.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which element should be included in an incident status update to help stakeholders understand the severity of the situation?

   • AA list of all employees involved in the response
   • BA description of the current impact on business operations
   • CThe exact IP addresses of all affected systems
   • DThe personal opinions of the incident commander
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A financial institution has a communication escalation procedure that requires notifying the regulator within 4 hours of a cyber incident that could affect customer funds. The incident commander has confirmed a breach of the transaction system, but the full scope is unknown. The legal team advises waiting for more information to avoid a premature report. What should the incident commander do?

   • AAsk the CEO to decide whether to notify the regulator
   • BNotify the regulator only after the incident is fully contained and the scope is known
   • CWait for the legal team to complete a full assessment before notifying the regulator
   • DNotify the regulator within the 4-hour window with the information available, and provide updates as more details emerge
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which communication tool is best suited for sending a formal incident notification to external regulators?

   • AAn instant message to a personal contact at the regulator
   • BA public social media post
   • CA verbal phone call without any written follow-up
   • DA secure email with a documented audit trail
   Reveal Solution Discussion Select an answer first