Certified in Risk and Information Systems Control (CRISC) — Question 579

Which of the following BEST measures the efficiency of an incident response process?

Answer options

• A. Number of incidents lacking responses
• B. Number of incidents escalated to management
• C. Average time between changes and updating of escalation matrix
• D. Average gap between actual and agreed response times

Correct answer: D

Explanation

The correct answer, D, accurately reflects the efficiency of the incident response process by comparing actual response times to what was agreed upon. Options A and B do not provide a measure of efficiency, as they simply count incidents without assessing response effectiveness. Option C focuses on the update process rather than the actual response efficiency.