Certified Information Security Manager (CISM) — Question 364

Which of the following is MOST important to ensure when developing escalation procedures for an incident response plan?

Answer options

• A. Minimum regulatory requirements are maintained.
• B. The contact list regularly updated.
• C. Each process is assigned to a responsible party.
• D. Senior management approval has been documented.

Correct answer: C

Explanation

Assigning each process to a responsible party is vital for ensuring accountability and clarity in incident response. Without clear ownership, procedures may be neglected or improperly executed, leading to ineffective responses. While the other options are important, they do not directly impact the effectiveness of the escalation process as much as assigning responsibility does.