Communication and Documentation Flashcards

A security proposal to executives that lacks a cost-benefit analysis is most likely to:

Answer: Struggle to gain support due to unclear business value

Executives need to see costs weighed against risk reduction to justify investment.

Which writing style is best suited for security reports?

Answer: Active voice, first person, and concise sentences

Active voice and concise wording make reports clear and attribute actions accurately.

Information classified as 'confidential' in a security report should be:

Answer: Marked, handled, and distributed on a need-to-know basis

Sensitive information requires proper marking and need-to-know distribution.

An after-action report following an emergency exercise should mainly identify:

Answer: Strengths, weaknesses, and corrective actions

After-action reports capture lessons learned and drive improvement plans.

Nonverbal cues observed during an interview should be:

Answer: Considered alongside verbal content and documented objectively

Nonverbal behavior can guide questioning but is not conclusive evidence of deception.

A key benefit of a standardized incident report form is:

Answer: Consistent data capture that supports trend analysis

Standard forms ensure uniform data that can be analyzed for patterns.

Before releasing an investigative report outside the security department, the manager should first:

Answer: Review it for accuracy and consult legal counsel regarding privilege and disclosure

Legal review protects privilege and prevents improper disclosure.