Certified in Risk and Information Systems Control (CRISC) — Question 832

Which of the following is the MOST important component of effective security incident response?

Answer options

• A. A documented communications plan
• B. Identification of attack sources
• C. Network time protocol synchronization
• D. Early detection of breaches

Correct answer: D

Explanation

Early detection of breaches is vital because it allows organizations to respond quickly to incidents, potentially minimizing damage. While the other options are important, they do not have the immediate impact on incident mitigation that early detection provides.