CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ90

Incident Management

When defining classifications for security incidents as part of developing an incident response plan, which of the following offers the MOST valuable input?

  • A Business impact analysis (BIA) results
  • B Recommendations from senior management
  • C The business continuity plan (BCP)
  • D Vulnerability assessment results
Explanation

Business impact analysis results identify the business consequences of disrupted processes and systems, including their relative criticality and recovery priorities. This information supports meaningful incident classifications based on the potential impact to the organization.

Community Discussion

No comments yet. Be the first to start the discussion!