Certified Information Security Manager (CISM) — Question 1183

Which of the following is MOST important to maintain integration among the incident response plan, business continuity plan (BCP), and disaster recovery plan (DRP)?

Answer options

• A. Asset classification
• B. Recovery time objectives (RTOs)
• C. Chain of custody
• D. Escalation procedures

Correct answer: D

Explanation

Escalation procedures are crucial for maintaining communication and coordination during incidents, ensuring that all plans work together effectively. While asset classification, RTOs, and chain of custody are important, they do not directly facilitate the integration of these plans like escalation procedures do.