CISSP-ISSMP: Information Systems Security Management Professional

Question

You are an Incident Manager at Orangesect.Inc. You have been assigned to establish a new extension of your enterprise. The networking to be implemented in the new extension requires various cable types and a suitable policy that you will decide. Which stage of the incident-handling process includes this decision-making?

Explanation

Preparation establishes the capabilities, resources, policies, and procedures needed before an incident occurs. Selecting networking cable types and setting the appropriate policy for a new enterprise extension are preparation activities, rather than incident identification, containment, or eradication.

Learn more

NIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management

CISSP-ISSMP: Information Systems Security Management Professional

AstroTutor

Notes

Readiness

QuestionQ107

Community Discussion