Certified Information Security Manager (CISM) — Question 1245

Which of the following is ESSENTIAL to ensuring effective incident response?

Answer options

• A. Business continuity plan (BCP)
• B. Cost-benefit analysis
• C. Classification scheme
• D. Senior management support

Correct answer: C

Explanation

A classification scheme is vital for effective incident response as it helps categorize incidents based on their severity and impact, enabling a more organized and efficient response. While a business continuity plan (BCP) and senior management support are important, they do not directly facilitate the immediate handling of incidents like a classification scheme does. A cost-benefit analysis, while useful for decision-making, is not essential for the incident response process itself.