CompTIA CySA+ (CS0-003) — Question 125

A cybersecurity analyst is recording the following details:

• ID
• Name
• Description
• Classification of information
• Responsible party

In which of the following documents is the analyst recording this information?

Answer options

• A. Risk register
• B. Change control documentation
• C. Incident response playbook
• D. Incident response plan

Correct answer: A

Explanation

The correct answer is A, the Risk register, as it is designed to document various risks, including their classifications and responsible parties. The other options do not typically include these specific details; Change control documentation focuses on changes made to systems, the Incident response playbook outlines procedures for handling incidents, and the Incident response plan details the overall strategy for incident management.