CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ759

Incident Management

Which of the following is the MOST important result of a post-incident review?

  • A The system affected by the incident is restored to its prior state.
  • B The root cause of the incident is determined.
  • C The person responsible for the incident is identified.
  • D The impact of the incident is reported to senior management.
Explanation

A post-incident review should establish the incident’s root cause so that corrective and preventive actions can reduce the likelihood or impact of recurrence.

Community Discussion

No comments yet. Be the first to start the discussion!