Communication during incidents in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the primary goal of communication during a cybersecurity incident?

The primary goal is to share accurate and timely information to coordinate response efforts and minimize damage.

beginner

Why is it important to have a predefined communication plan for incidents?

A predefined plan ensures clear roles, responsibilities, and channels, reducing confusion and speeding up response.

intermediate

Who are typical stakeholders involved in communication during an incident?

Stakeholders include the incident response team, management, affected users, legal teams, and sometimes external parties like law enforcement or customers.

intermediate

What role does confidentiality play in communication during incidents?

Confidentiality ensures sensitive information is shared only with authorized people to prevent leaks and further risks.

beginner

How can clear communication reduce the impact of a cybersecurity incident?

Clear communication helps avoid misunderstandings, coordinates actions efficiently, and keeps everyone informed, which speeds recovery and limits damage.

What should be established before an incident occurs to ensure effective communication?

A A communication plan with roles and channels

B A list of all employees' personal emails

C A social media announcement strategy

D A public press release template

A communication plan with clear roles and channels helps coordinate response and avoid confusion during incidents.

Who should NOT receive sensitive incident details?

A External attackers

B Authorized management

C Incident response team

D Legal advisors

Sensitive details must be kept confidential and not shared with unauthorized parties like attackers.

Which is a key benefit of timely communication during an incident?

A Increasing confusion

B Delaying response actions

C Ignoring stakeholders

D Coordinating efforts quickly

Timely communication helps coordinate response efforts quickly to reduce incident impact.

What is a common channel used for incident communication?

A Public social media posts

B Personal text messages

C Incident management system or secure messaging

D Random phone calls

Secure and official channels like incident management systems ensure controlled and reliable communication.

Why should communication roles be predefined?

A To assign blame quickly

B To ensure everyone knows their responsibilities

C To delay information sharing

D To confuse the team

Predefined roles help everyone understand their tasks and improve response efficiency.

Explain why having a clear communication plan is essential during a cybersecurity incident.

Think about how confusion can slow down fixing problems.

Describe the importance of confidentiality when sharing information during an incident.

Consider what could happen if attackers get incident details.