Certified Information Security Manager (CISM) — Question 656

Which of the following is MOST important to include in an incident response plan to ensure incidents are responded to by the appropriate individuals?

Answer options

• A. Skills required for the incident response team
• B. A detailed incident notification process
• C. A list of external resources to assist with incidents
• D. Service level agreements (SLAs)

Correct answer: B

Explanation

The correct answer is B because a detailed incident notification process ensures that the appropriate individuals are alerted and can respond effectively to incidents. While the other options provide valuable information and resources, they do not directly facilitate the notification and response process as effectively as a structured notification process does.