Certified Information Security Manager (CISM) — Question 343

Which of the following is the GREATEST benefit of including incident classification criteria within an incident response plan?

Answer options

• A. More visibility to the impact of disruptions
• B. Ability to monitor and control incident management costs
• C. Effective protection of information assets
• D. Optimized allocation of recovery resources

Correct answer: D

Explanation

The correct answer, D, highlights that optimized allocation of recovery resources ensures that the most critical areas receive the necessary attention and resources during an incident. While options A, B, and C provide benefits, they do not directly address the efficiency and effectiveness gained from proper resource allocation during incident recovery.