Certified Information Security Manager (CISM) — Question 1104

Which of the following is the MOST important objective when planning an incident response program?

Answer options

• A. Minimizing business impact
• B. Managing resources
• C. Recovering from a disaster
• D. Ensuring IT resiliency

Correct answer: A

Explanation

The most critical objective of an incident response program is to minimize business impact, as this ensures that operations can continue with minimal disruption. While managing resources, recovering from a disaster, and ensuring IT resiliency are important, they are secondary to the goal of protecting the business's overall health and continuity.