CRISC: Certified in Risk and Information Systems ControlDemo

Question

A risk practitioner is collaborating with the incident management team to prioritize activities. Which of the following should be the FIRST priority in the incident response plan?

A Verify an incident actually occurred.
B Verify the recovery time objective (RTO).
C Brief the senior leadership team,
D Identify the root cause of the incident.

Explanation

The initial priority is to confirm that an incident has actually occurred, so the response is activated based on a validated event rather than a false positive. Recovery planning, senior-leadership briefings, and root-cause analysis occur after initial identification and assessment.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1609

Community Discussion