QuestionQ17

Incident Response and Management

A new SOC manager reviewed the findings on the strengths and weaknesses from the previous tabletop exercise to make improvements. Which of the following should the SOC manager use to improve the process?

Explanation

A lessons-learned register documents observations and improvement actions identified during exercises and incidents, making it the appropriate resource for improving future SOC processes and tabletop exercises.

Community Discussion

No comments yet. Be the first to start the discussion!