Certified in Risk and Information Systems Control (CRISC) — Question 421

Which of the following is MOST important for successful incident response?

Answer options

• A. The quantity of data logged by the attack control tools
• B. The ability to trace the source of the attack
• C. The timeliness of attack recognition
• D. Blocking the attack route immediately

Correct answer: C

Explanation

The timeliness of attack recognition is crucial because it allows for a faster response, minimizing damage. While tracing the source and blocking the attack route are important, they rely on recognizing the incident quickly to be effective. Logging data is valuable but does not directly impact the immediate response needed during an incident.