Certified Information Security Manager (CISM) — Question 917

Which of the following will BEST facilitate timely and effective incident response?

Answer options

• A. Including penetration test results in incident response planning
• B. Assessing the risk of compromised assets
• C. Notifying stakeholders when invoking the incident response plan
• D. Classifying the severity of an incident

Correct answer: D

Explanation

Classifying the severity of an incident is crucial as it helps prioritize response efforts and allocate resources effectively. The other options, while important, do not directly address the immediate need for prioritization in incident management, which is essential for a timely response.