Back to Business Continuity and Disaster Recovery

Crisis Communication

5 minutes 5 Questions

Crisis Communication is a vital component of Business Continuity and Disaster Recovery planning, which focuses on managing communication during and after a crisis or emergency situation. Effective crisis communication is essential to protect a company's reputation, maintain stakeholder trust, and e…

Test mode:
Start practice test
CompTIA Security+ - Crisis Communication Example Questions

Test your knowledge of Crisis Communication

Question 1

During a data breach, you are tasked with communicating the crisis to company stakeholders. What is the most appropriate approach?

Correct Answer: Brief stakeholders on the issue, potential impacts, mitigations, and updates

The best approach to crisis communication is to provide accurate, clear, and relevant information to stakeholders about the issue, potential impacts, mitigation measures, and updates of any major changes or findings. Downplaying the breach, ignoring stakeholders, or overemphasizing its severity can damage the company's credibility and trust level.

Question 2

As the Security Specialist at your company, you have discovered a ransomware attack affecting critical systems. What should be included in your initial communication to the leadership team?

Correct Answer: Scope, potential impacts, mitigation strategies, and plan of action

During a crisis communication, the initial priority is to provide accurate information on the scope of the issue, potential impacts, mitigation strategies, and a plan of action. Discussing attacker identity, motivations, and demands or providing detailed technical analyses aren't the focus during the initial communication. Promise of a particular resolution time can create false expectations.

Question 3

You discover a vulnerability in your company's software that can lead to unauthorized data access. What should you include in your communication to software users?

Correct Answer: Description of the vulnerability, affected software versions, and mitigation steps

Crisis communication to users about a software vulnerability should include a clear description of the vulnerability, the affected software versions, and recommended mitigation steps. Detailed technical analysis, comparisons to other companies, and internal discussions aren't relevant in this context and can be counterproductive.

More Crisis Communication questions
2 questions (total)
Start 2 question test