Certified Information Security Manager (CISM) — Question 644

When creating an incident response plan, the PRIMARY benefit of establishing a clear definition of a security incident is that it helps to:

Answer options

• A. develop effective escalation and response procedures
• B. make tabletop testing more effective
• C. adequately staff and train incident response teams
• D. communicate the incident response process to stakeholders

Correct answer: A

Explanation

The main advantage of a clear definition of a security incident is that it allows organizations to develop effective escalation and response procedures, ensuring that incidents are handled promptly and appropriately. The other options, while important, are secondary benefits that arise from having a clear definition but do not directly address the primary benefit.