Certified Information Systems Security Professional (CISSP) — Question 355

What type of investigation applies when malicious behavior is suspected between two organizations?

Answer options

• A. Regulatory
• B. Operational
• C. Civil
• D. Criminal

Correct answer: C

Explanation

The correct answer is Civil because it pertains to disputes and wrongful acts that can lead to civil lawsuits between organizations. Regulatory investigations are focused on compliance with laws, Operational pertains to internal processes, and Criminal investigations are typically initiated by law enforcement for violations of criminal law, which may not be the first avenue for inter-organizational issues.