Free ISACA CISM Actual Exam Questions - Question 8 Discussion
Question No. 8
If civil litigation is a goal for an organizational response to a security incident, the PRIMARY step
should be to:
should be to:
Select one option, then reveal solution.
US
CN
Carlos N.
2026-02-09
Probably B here. Even if you capture evidence first, without documenting the chain of custody, that evidence won't hold up in court. It's about making sure everything stays uncontaminated and accounted for legally. D is definitely out since rebooting can alter or destroy important data, and A’s more for criminal cases, not the primary civil process step. So yeah, securing proper documentation from the start is the way to go.
0
CN
Carlos N.
2026-01-24
Maybe B makes the most sense since keeping the chain of custody intact is crucial for any legal process. If the evidence isn’t properly documented, it could get thrown out in court.
0
CN
Carlos N.
2026-01-15
Option B, chain of custody is key. D sounds risky, could mess up evidence.
0