CompTIA CySA+ (CS0-001) — Question 165

Which of the following describes why it is important for an organization's incident response team and legal department to meet and discuss communication processes during the incident response process?

Answer options

• A. To comply with existing organization policies and procedures on interacting with internal and external parties
• B. To ensure all parties know their roles and effective lines of communication are established
• C. To identify which group will communicate details to law enforcement in the event of a security incident
• D. To predetermine what details should or should not be shared with internal or external parties in the event of an incident

Correct answer: A

Explanation

The correct answer is A because it emphasizes the necessity of following organizational policies and procedures for communication, which is crucial for legal compliance. Options B, C, and D, while important aspects of incident response, do not primarily focus on the adherence to existing policies and procedures related to communication.