A security policy at a company states that all security incidents must be reported to the CISO within one hour. However, the IT help desk often learns of incidents first and is unsure whether to report directly to the CISO or to their immediate supervisor. What is the best way to clarify this?

Update the policy to define the reporting chain and escalation path

Assume the help desk will report to the CISO because the policy says so

Let the help desk decide based on the severity of the incident

Have the help desk report to their supervisor first, who then reports to the CISO

A small retail store with a single point-of-sale terminal and no sensitive data storage is classified as a low-impact facility. The store manager wants to implement security controls that are appropriate for the risk level. Which control should be prioritized?

A basic access control system and visitor log

A redundant data center with failover capability

A full intrusion detection system with 24/7 monitoring

A dedicated security operations center (SOC)

A manufacturing plant is classified as a low-impact facility. The plant manager has been asked to review the security policy and provide input. What is the manager's role in this process?

To provide operational insight and ensure the policy is practical

To approve the policy on behalf of the board

To keep the policy confidential from employees

To enforce the policy without any input

A low-impact facility has a part-time security guard who is also responsible for other duties. The facility manager wants to ensure that security responsibilities are clearly assigned. What is the most appropriate action?

Hire a dedicated full-time security team

Rely on the guard's previous experience without formal documentation

Document the security duties in the guard's job description and provide training

Assign security duties to all employees on a rotating basis

A utility company is implementing a new security policy. The policy requires all employees to complete annual security awareness training. Who is ultimately accountable for ensuring that employees complete the training?

The senior manager of each department

GIAC Critical Infrastructure Protection (GCIP)

Domain 1Objective 3

Security Management Controls GCIP Practice Questions (Page 8)

Part of the Foundations and Governance domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 6–10 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

3concepts

Questions 36–40

36expert · hard
A security policy at a company states that all security incidents must be reported to the CISO within one hour. However, the IT help desk often learns of incidents first and is unsure whether to report directly to the CISO or to their immediate supervisor. What is the best way to clarify this?
Select an answer first
37application · medium
A small retail store with a single point-of-sale terminal and no sensitive data storage is classified as a low-impact facility. The store manager wants to implement security controls that are appropriate for the risk level. Which control should be prioritized?
Select an answer first
38application · medium
A manufacturing plant is classified as a low-impact facility. The plant manager has been asked to review the security policy and provide input. What is the manager's role in this process?
Select an answer first
39application · medium
A low-impact facility has a part-time security guard who is also responsible for other duties. The facility manager wants to ensure that security responsibilities are clearly assigned. What is the most appropriate action?
Select an answer first
40application · medium
A utility company is implementing a new security policy. The policy requires all employees to complete annual security awareness training. Who is ultimately accountable for ensuring that employees complete the training?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.