Certified Information Security Manager (CISM) — Question 674

Which of the following would BEST enable the timely execution of an incident response plan?

Answer options

• A. Definition of trigger events
• B. Centralized service desk
• C. The introduction of a decision support tool
• D. Clearly defined data classification process

Correct answer: A

Explanation

The identification of trigger events is crucial as it allows for immediate recognition of incidents that require a response, ensuring timely execution of the plan. A centralized service desk, while helpful, does not directly lead to prompt incident recognition. A decision support tool can aid in decision-making but does not inherently speed up the execution process, and a data classification process, while important for security, does not directly impact response timing.