Certified Information Security Manager (CISM) — Question 505
Which of the following is the MAIN benefit of performing an assessment of existing incident response processes?
Answer options
- A. Validation of current capabilities
- B. Benchmarking against industry peers
- C. Prioritization of action plans
- D. Identification of threats and vulnerabilities
Correct answer: A
Explanation
The main benefit of assessing existing incident response processes is to validate current capabilities, ensuring that the organization can effectively respond to incidents. While benchmarking, prioritization, and identification of threats are important, they serve as secondary benefits rather than the main focus of the assessment.