CompTIA Security+ (SY0-501) — Question 579

An organization is drafting an IRP and needs to determine which employees have the authority to take systems offline during an emergency situation. Which of the following is being outlined?

Answer options

• A. Reporting and escalation procedures
• B. Permission auditing
• C. Roles and responsibilities
• D. Communication methodologies

Correct answer: C

Explanation

The correct answer is C, as defining roles and responsibilities is essential for ensuring that the right individuals have the authority to act during emergencies. The other options, while important in their own right, do not specifically address the delegation of authority to take systems offline.