Certified Information Systems Auditor (CISA) — Question 1129

Which of the following is the PRIMARY benefit of a tabletop exercise for an incident response plan?

Answer options

• A. It increases confidence in the team’s response readiness.
• B. It reduces the likelihood of an incident occurring.
• C. It identifies deficiencies in the operating environment.
• D. It demonstrates the maturity of the incident response program.

Correct answer: A

Explanation

The correct answer is A because tabletop exercises are designed to enhance the confidence and preparedness of the response team in managing incidents. Options B, C, and D are incorrect as they do not capture the primary focus of a tabletop exercise, which is to build readiness rather than prevent incidents, identify operational deficiencies, or measure program maturity.