Certified Information Security Manager (CISM) — Question 123
Which of the following is MOST important to ensuring that incident management plans are executed effectively?
Answer options
- A. Management support and approval has been obtained.
- B. An incident response maturity assessment has been conducted.
- C. A reputable managed security services provider has been engaged.
- D. The incident response team has the appropriate training.
Correct answer: D
Explanation
Having the right training for the incident response team is crucial, as it equips them with the necessary skills to effectively manage incidents. While management support, maturity assessments, and engaging providers are important, they do not directly impact the execution capabilities of the team during an incident.