<< Prev Question Next Question >>

Question 33/34

Scenario 6: Solicure is a leading pharmaceutical company dedicated to manufacturing and distributing essential medications. Thriving in an industry characterized by strict regulations and demanding quality benchmarks, Solicure has taken proactive steps to adhere to the requirements of the NIS 2 Directive. This proactive approach strengthens digital resilience and ensures the continued excellence of product offerings.
Last year, a cyberattack disrupted Solicure's research and development operations, raising concerns about the potential compromise of sensitive information regarding drug formulation. Solicure initiated an immediate investigation led by its cybersecurity team, gathering technical data to understand the attackers' methods, assess the damage, and swiftly identify the source of the breach. In addition, the company implemented measures to isolate compromised systems and remove the attackers from its network. Lastly, acknowledging the necessity for long-term security improvement, Solicure implemented a comprehensive set of security measures to comply with NIS 2 Directive requirements, covering aspects such as cybersecurity risk management, supply chain security, incident handling, crisis management, and cybersecurity crisis response planning, among others.
In line with its crisis management strategy, Solicure's chief information security officer, Sarah, led the initiative to develop a comprehensive exercise plan to enhance cyber resilience. This plan was designed to be adaptable and inclusive, ensuring that organizational decision-makers possessed the essential knowledge and skills required for effective cybersecurity threat mitigation. Additionally, to enhance the efficacy of its crisis management planning, Solicure adopted an approach that prioritized the structuring of crisis response.
A key aspect of Solicure's cybersecurity risk management approach centered on the security of its human resources. Given the sensitive nature of its pharmaceutical products, the company placed utmost importance on the employees' backgrounds. As a result, Solicure implemented a rigorous evaluation process for new employees, including criminal history reviews, prior role investigations, reference check, and pre-employment drug tests.
To comply with NIS 2 requirements, Solicure integrated a business continuity strategy into its operations. As a leading provider of life-saving medicines and critical healthcare products, Solicure faced high stakes, with potential production and distribution interruptions carrying life-threatening consequences for patients. After extensive research and consultation with business management experts, the company decided to utilize a secondary location to reinforce the critical operations at the primary site. Along with its business continuity management strategy, Solicure developed a set of procedures to recover and protect its IT infrastructure in the event of a disaster and ensure the continued availability of its medications.
Which of the following crisis management planning approaches did Solicure adopt? Refer to scenario 6.

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (34q)
Question 1: Scenario 3: Founded in 2001, SafePost is a prominent postal ...
Question 2: Which of the following entities are included on the scope of...
Question 3: An organization has decided to provide its cybersecurity tra...
Question 4: On which of the following critical areas does an organizatio...
Question 5: Scenario 7:CleanHydro is a forward-thinking company operatin...
Question 6: Scenario 8: FoodSafe Corporation is a well-known food manufa...
Question 7: Which of the following entities are excluded from the scope ...
Question 8: According to Article 10 of the NIS 2 Directive, what is one ...
Question 9: Scenario 2: MHospital, founded in 2005 in Metropolis, has be...
Question 10: What is the maximum administrative fine that important entit...
Question 11: Scenario 2: MHospital, founded in 2005 in Metropolis, has be...
Question 12: According to the NIS 2 Directive, what is the default freque...
Question 13: A financial institution issued a public statement acknowledg...
Question 14: Scenario 2: MHospital, founded in 2005 in Metropolis, has be...
Question 15: According to Article 31, what is the recommended approach fo...
Question 16: What is the role of a sponsoring senior executive in the sup...
Question 17: What is the requirement for Member States regarding resource...
Question 18: What is the required frequency for Member States to update t...
Question 19: Scenario 8: FoodSafe Corporation is a well-known food manufa...
Question 20: During which phase of the key management life cycle can keys...
Question 21: What is the primary responsibility of an information securit...
Question 22: Scenario 6: Solicure is a leading pharmaceutical company ded...
Question 23: Scenario 5:Based in Altenberg, Germany, Astral Nexus Power i...
Question 24: Scenario 7:CleanHydro is a forward-thinking company operatin...
Question 25: What is the key feature of the process for entities that vol...
Question 26: According to Article 7 of the NIS 2 Directive, what is one o...
Question 27: Which reporting method is best suited for presenting raw dat...
Question 28: Scenario 2: MHospital, founded in 2005 in Metropolis, has be...
Question 29: Scenario 1: into incidents that could result in substantial ...
Question 30: Which of the following statements regarding critical entitie...
Question 31: Scenario 7:CleanHydro is a forward-thinking company operatin...
Question 32: Scenario 5:Based in Altenberg, Germany, Astral Nexus Power i...
Question 33: Scenario 6: Solicure is a leading pharmaceutical company ded...
Question 34: What is the role of the Commission within the Union Civil Pr...