Certified Information Security Manager (CISM) — Question 550

Which of the following is the MOST relevant factor when determining the appropriate escalation process in the incident response plan?

Answer options

• A. Significance of the affected systems
• B. Number of resources allocated to respond
• C. Resilience capability of the affected systems
• D. Replacement cost of the affected systems

Correct answer: A

Explanation

The significance of the affected systems is critical as it directly impacts the organization's operations and potential losses. While the number of resources, resilience capability, and replacement costs are important, they are secondary to understanding the priority and impact of the systems involved in the incident.