Certified Information Security Manager (CISM) — Question 255

Which of the following is the BEST way to enhance training for incident response teams?

Answer options

• A. Conduct interviews with organizational units.
• B. Establish incident key performance indicators (KPIs).
• C. Participate in emergency response activities.
• D. Perform post-incident reviews.

Correct answer: C

Explanation

Participating in emergency response activities provides practical experience and helps teams understand real-world scenarios, which is essential for effective training. While the other options may contribute to training improvement, they do not provide the same level of hands-on experience as participating in actual emergency response activities.