CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ713

Incident Management

Which of the following processes BEST supports evaluating incident-response effectiveness?

  • A Post-incident review
  • B Chain of custody
  • C Incident logging
  • D Root cause analysis
Explanation

A post-incident review evaluates the response after an incident, including what worked, what did not, and what process improvements are needed.

Community Discussion

No comments yet. Be the first to start the discussion!