Certified Information Systems Auditor (CISA) — Question 391

Which of the following is the BEST performance indicator for the effectiveness of an incident management program?

Answer options

• A. Incident alert meantime
• B. Number of incidents reported
• C. Average time between incidents
• D. Incident resolution meantime

Correct answer: D

Explanation

The correct answer is D, as incident resolution meantime directly reflects how quickly incidents are addressed and resolved, which is a key indicator of the program's effectiveness. The other options, while informative, do not provide as direct a measure of the program's performance in resolving incidents.