Certified Information Security Manager (CISM) — Question 806
Which of the following is the PRIMARY objective of incident triage?
Answer options
- A. Containment of threats
- B. Coordination of communications
- C. Categorization of events
- D. Mitigation of vulnerabilities
Correct answer: C
Explanation
The primary objective of incident triage is to categorize events to determine their significance and the necessary response. While containment, coordination, and mitigation are important aspects of incident management, they come after events have been categorized and prioritized.