Certified Information Security Manager (CISM) — Question 155

When creating an incident response plan, which of the following is MOST important to include during the preparation phase of the plan’s life cycle?

Answer options

• A. Communication plan
• B. Response procedures
• C. Risk management plan
• D. Forensic analysis procedures

Correct answer: A

Explanation

The communication plan is vital during the preparation phase because it ensures that all stakeholders are informed and can coordinate effectively during an incident. While response procedures, risk management plans, and forensic analysis procedures are also important, they rely on effective communication to be executed successfully.