Certified Information Systems Security Professional (CISSP) — Question 245

What is the PRIMARY benefit of incident reporting and computer crime investigations?

Answer options

• A. Complying with security policy
• B. Repairing the damage and preventing future occurrences
• C. Providing evidence to law enforcement
• D. Appointing a computer emergency response team

Correct answer: B

Explanation

The correct answer, B, highlights the importance of not only addressing the damage caused by incidents but also implementing measures to prevent similar occurrences in the future. Options A, C, and D are important aspects of incident management, but they do not capture the primary benefit of addressing the immediate and future impacts of incidents.