03/09/2026
๐จ Would you know what to do first if someone in your organisation clicked on a phishing email?
Option C is the correct answer. It focuses on containing the threat before it can spread further.
Disconnecting the affected computer from the network can help limit an attackerโs ability to move deeper into your systems while the incident response team investigates.
The other steps matter too but containment comes first.
Want to build confidence in real-world cybersecurity and information security situations?
๐ Develop practical skills with our PECB Certified ISO/IEC 27001 Lead Implementer course.
Did you choose Option C? Tell us in the comments! ๐
{ IncidentResponse ISO27001 LeadImplementer CyberSecurityTraining InformationSecurityManagement GrowSkillsStore}