Certified Information Security Manager (CISM) — Question 640
Which of the following BEST facilitates the effective execution of an incident response plan?
Answer options
- A. The plan is based on industry best practice.
- B. The incident response plan aligns with the IT disaster recovery plan (DRP).
- C. The plan is based on risk assessment results.
- D. The response team is trained on the plan.
Correct answer: D
Explanation
The correct answer is D because a well-trained response team is essential for effectively executing an incident response plan. While options A, B, and C are important components of a plan, they do not ensure that the team can effectively enact the plan during an incident.