Certified Information Security Manager (CISM) — Question 985

Which of the following is MOST important for effective cybersecurity incident management?

Answer options

• A. Early detection and response
• B. Regular tabletop exercises
• C. Root cause analysis
• D. Investigation and forensics

Correct answer: A

Explanation

Early detection and response is critical in cybersecurity incident management as it allows organizations to mitigate threats before they escalate. While regular tabletop exercises, root cause analysis, and investigation and forensics are important components, they are secondary to the immediate need for quick detection and action to minimize damage.