CISM: Certified Information Security ManagerDemo

Question

Which of the following is MOST essential when developing an incident response plan?

A Identifying what constitutes an incident
B Identifying vulnerable data assets
C Documenting incident notification and escalation processes
D Aligning with the risk assessment process

Explanation

A clear definition of an incident is foundational to an incident response plan because it determines which events activate the response process and ensures that personnel apply response procedures consistently.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ320

Community Discussion