CISM: Certified Information Security Manager

Applicable regulatory requirements are the primary consideration because they impose mandatory incident-response obligations, such as breach reporting and notification timeframes, privacy protections, and evidence-handling requirements. NIST SP 800-61 Rev. 3 addresses incident-response activities conducted in accordance with regulatory, legal, and policy requirements.