Certified Information Security Manager (CISM) — Question 504

When developing a tabletop test plan for incident response testing, the PRIMARY purpose of the scenario should be to:

Answer options

• A. measure management engagement as part of an incident response team.
• B. provide participants with situations to ensure understanding of their roles.
• C. give the business a measure of the organization's overall readiness.
• D. challenge the incident response team to solve the problem under pressure.

Correct answer: B

Explanation

The correct answer is B, as the primary goal is to ensure that participants clearly understand their roles during an incident. Options A, C, and D, while important, focus on measuring engagement, overall readiness, and pressure handling, which are not the main aim of the scenario in this context.