CIM Communication & Stakeholder Management 4 — Questions and Answers
Question 1: Which stakeholder analysis technique maps stakeholders by their level of interest and influence?
- SWOT analysis
- Power/Interest grid (Correct answer)
- RACI matrix
- Fishbone diagram
Correct answer: Power/Interest grid
The Power/Interest grid helps prioritize communication effort based on each stakeholder's influence and level of concern.
Question 2: A regulatory body contacts your organization during an active cybersecurity incident. The incident manager's FIRST action should be:
- Provide all available technical details to demonstrate transparency
- Notify legal counsel and the designated compliance contact before responding (Correct answer)
- Request that the regulator submit questions in writing only
- Temporarily suspend the incident bridge to focus on the inquiry
Correct answer: Notify legal counsel and the designated compliance contact before responding
Regulatory communications carry legal implications and must be routed through legal and compliance before any response.
Question 3: What is the MAIN risk of having too many people on an incident bridge call?
- The call may be disconnected due to capacity limits
- Decision-making slows and critical voices are drowned out (Correct answer)
- Costs increase significantly for hosted conference systems
- The incident log becomes difficult to maintain
Correct answer: Decision-making slows and critical voices are drowned out
Large bridge calls reduce signal-to-noise ratio and delay decisions that need a focused group.
Question 4: Which of the following is a characteristic of an effective incident status page update?
- Written in technical jargon for accuracy
- Timestamped, brief, and written in plain language (Correct answer)
- Published only after the incident is fully resolved
- Includes full names of all responders
Correct answer: Timestamped, brief, and written in plain language
Status page updates must be timely, readable by non-technical users, and clearly timestamped for credibility.
Question 5: When should the incident manager send an 'all-clear' notification to stakeholders?
- As soon as the technical fix is deployed
- Only after services are verified as restored and monitoring confirms stability (Correct answer)
- When the majority of users report the issue is resolved
- Immediately when the incident bridge is closed
Correct answer: Only after services are verified as restored and monitoring confirms stability
Premature all-clear notifications that precede confirmed stability damage trust when the issue recurs.
Question 6: In the context of stakeholder management, 'managing up' refers to:
- Escalating every decision to senior management
- Proactively keeping senior leaders informed so they can advocate and unblock resources (Correct answer)
- Reporting metrics to the board during incidents
- Assigning incident tasks to junior team members
Correct answer: Proactively keeping senior leaders informed so they can advocate and unblock resources
Managing up means keeping leadership informed and equipped to remove organizational obstacles without micromanaging the response.
Question 7: Which communication artifact provides the MOST comprehensive record of all decisions and actions taken during an incident?
- Incident ticket in the ITSM tool
- Executive briefing deck
- Incident chronological log (timeline) (Correct answer)
- Post-incident review agenda
Correct answer: Incident chronological log (timeline)
A chronological incident log captures every decision, action, and communication with timestamps for full auditability.
CIM Communication & Stakeholder Management 4
Which stakeholder analysis technique maps stakeholders by their level of interest and influence?