CISM: Certified Information Security ManagerDemo

Question

The PRIMARY goal of conducting a post-incident review is to:

A identify control improvements
B identify vulnerabilities
C re-evaluate the impact of incidents
D identify the root cause

Explanation

A post-incident review captures lessons learned and identifies corrective actions to strengthen security controls and the incident-handling process, reducing the likelihood or impact of similar future incidents. Root-cause identification may be an input to this work, but control improvement is the broader objective.

Learn more

NIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ65

Community Discussion