CISM: Certified Information Security ManagerDemo

Question

Which of the following BEST helps an organization improve the processes and procedures in its incident response plan?

A Information security audits
B Security risk assessments
C Lessons learned analysis
D Key performance indicators (KPIs)

Explanation

Lessons learned analysis captures findings from incident handling and uses them to improve incident-response practices, including response processes and procedures. NIST describes lessons learned as input to improvement activities across incident response functions.

Learn more

NIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ620

Community Discussion