Leadership & Change GSTRT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security manager is introducing a new incident response workflow that requires on-call analysts to document their actions in real time. Several analysts resist, claiming it will slow down their response time. What is the best way to mitigate this resistance?

   • AOffer additional compensation to analysts who comply with the new workflow.
   • BPilot the new workflow with a small group of analysts and use their feedback to refine the process before full rollout.
   • CExplain that the documentation is required by compliance and there is no alternative.
   • DDelay the implementation until all analysts agree to the new workflow.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A CISO is communicating a change that will involve collecting additional personal data for security monitoring. The legal team has approved the change, but employees are concerned about privacy. The CISO must communicate the change while maintaining trust. Which communication approach is most ethical and effective?

   • ABe transparent about what data is collected, why it is needed, and how it will be protected, and invite employee feedback.
   • BMinimize the details about data collection to avoid alarming employees.
   • CEmphasize that the change is legally required and that employees have no choice.
   • DCommunicate the change only to managers and ask them to relay the information to their teams.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization wants to become more agile in responding to emerging cyber threats. The security team currently operates with rigid processes and a blame culture when incidents occur. Which initiative best fosters a change-ready culture?

   • ACreate a centralized decision-making structure to ensure consistency in responses to incidents.
   • BIncrease the frequency of security audits to catch errors early and hold individuals accountable.
   • CReward employees who follow existing processes exactly, even if those processes are outdated.
   • DImplement a post-incident review process that focuses on system improvements rather than individual mistakes.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is planning to implement a new AI-based security analytics tool that will monitor employee behavior. The tool has the potential to flag false positives that could damage employee reputations. The compliance team has approved the tool, but the ethics committee has concerns. The CISO must proceed. What is the most ethical course of action?

   • AImplement the tool quietly to avoid alerting employees and to catch insider threats effectively.
   • BUse the tool only for high-risk employees, such as those with access to sensitive data, to minimize impact.
   • CDelay implementation until the ethics committee fully approves, even if it means missing a critical security window.
   • DImplement the tool with a transparent policy that includes human review before any disciplinary action is taken.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security director is planning to implement a new monitoring system that will collect personal communications data of employees to detect insider threats. The director must balance the need for security with ethical responsibilities. Which action best demonstrates ethical leadership in this change?

   • ADefer the decision to the legal department to ensure compliance, without further leader involvement.
   • BLimit the monitoring to senior executives only, as they have access to the most sensitive data.
   • CConduct a privacy impact assessment and involve employee representatives in the design of the monitoring policy.
   • DImplement the system quietly to avoid alerting potential insider threats.
   Reveal Solution Discussion Select an answer first