Alert #2: C&C communication An internal device connected to an IP address that has been used as a command-and-control server

Question: Should this issue be escalated?

Answer:

If you answered Yes:

1.Briefly describe the potential impact of the issue, including its potential impact to C.I.A.

2.Describe any recommended immediate action to address the event.

3.Provide your recommendation for a security control to mitigate risk moving forward.

If you answered No:

1.Provide your reason for dismissing the alert.