a. What is the definition of a major incident?

b. What group handles a major incident?

17b.) Major incidents are handled by the ________.

a. On-duty staff

b. CSIRT

c. Outside consultant

d. FBI

c. What characteristics should its leader have?

17c.) CSIRT leaders should come from ________.

a. An outside crisis vendor

b. A business department

c. The security department

d. The IT department

d. What major departments will almost always be involved?

17d.) Which department will almost always be involved in a CSIRT?

a. The IT department

b. The legal department

c. The human resources department

d. All of the above

e. Who is the only person who should talk about the incident with the media and other outsiders?

17e.) Communication with the media should be restricted to the following: ________.

a. The public relations department

b. The legal department

c. The IT department

d. The security department

f. Who may elect to speak instead?