Certified Information Security Manager (CISM) — Question 422

Which of the following external entities would provide the BEST guidance to an organization facing advanced attacks?

Answer options

• A. Incident response experts from highly regarded peer organizations
• B. Open-source reconnaissance
• C. Recognized threat intelligence communities
• D. Disaster recovery consultants widely endorsed in industry forums

Correct answer: C

Explanation

The correct answer is C, as recognized threat intelligence communities provide specialized insights and data on emerging threats and attack vectors, which are crucial for organizations facing advanced attacks. While incident response experts (A) and disaster recovery consultants (D) can offer valuable support, they are not primarily focused on ongoing threat intelligence. Open-source reconnaissance (B) can be useful but does not provide the depth of guidance that established communities can offer.