PRIORITIES & DEFINITIONS
RESPONSE/WORKAROUND/RESOLUTION
TICKET UPDATES & MONITORING
IMPACT & URGENCY MATRIX
SECURITY INCIDENT RESPONSE
100

The priority level for an issue that affects the entire company with high urgency.

What is critical

100

The fastest a resource can acknowledge a problem is called this.

What is Response Time Objective

100

This tool allows engineers to see SLA metrics in real-time.

What is “My SLA – First Response” widget in My Work dashboard?

100

Urgency where a service is unavailable for a major portion of the company.

What is Critical or High Urgency

100

A DDos attack on network infrastructure affecting multiple departments is classified as this.

What is Critical

200

Priority that affects multiple users or departments with high urgency, or the entire company with low urgency.

What is High

200

The maximum time allowed to discover a solution to an issue is called this.

What is Workaround Time Objective?

200

Which two management roles review tickets to ensure SLA compliance?

What are DoD and NOC Manager 

200

Impact affecting only one or two users in a company.

What is Low Impact

200

Compromise of a single system with business-defined sensitive data is classified as this. 

What is High

300

Priority for a single user issue with low urgency.

What is Low

300

The maximum time quoted for a supported remediation of a ticket is called this.

What is Resolution Time Objective?

300

If an SLA is missed, the team must do this.

What is analyze the reason, take action, and inform the client?

300

If an issue affects multiple users with no workaround, it is classified as this urgency.  

What is Medium Urgency

300

A compromised account with no business-defined sensitive data is classified as this.

What is Medium

400

If a ticket is wrongly categorized as Critical but it does not affect production, what should be done?

What is lower the priority to the correct level

400

For a High priority ticket, the response time objective is this.

What is 60 minutes?

400

Tickets should be updated at intervals depending on priority. How often should Medium priority tickets be updated?

What is daily

400

Combining High Impact + Low Urgency results in this priority.

What is High Priority

400

Network scans, Snort reports, or firewall logs with minor impact are classified as this.

What is Low or Informational (No Action

500

This priority is used when a problem prevents a user from performing part of their duties, but a workaround exists.

What is Low or Medium (depending on impact)

500

For a Critical priority ticket, how often should updates be provided to the client?


What is Hourly

500

The SLA review process includes this type of reporting.

What is daily and weekly reporting?

500

Combining Medium Impact + Medium Urgency results in this priority.

What is Medium Priority

500

Compromised Active Directory domain controller accounts affecting multiple departments are classified as this.

What is High or Critical depending on scope

M
e
n
u