Certified Information Security Manager CISM · Free Practice Question Medium
Question 29
How can an organization best ensure the effectiveness of its incident response evaluation process?
- A Comparing response times with predefined benchmarks for all incident types
- B Focusing evaluations solely on meeting compliance requirements
- C Simulating incidents based on historical data and lessons learned
- D Emphasizing the rapid completion of incident response exercises
Reveal correct answer
Correct answer: C
Explanation
The Correct Answer: Simulating incidents based on historical data and lessons learned: This approach tailors the evaluation process to reflect real-world scenarios and past experiences, ensuring continuous improvement in incident response effectiveness. The Incorrect Answers: Comparing response times with predefined benchmarks for all incident types: While useful, focusing only on response times doesn't provide a holistic view of incident handling capabilities and doesn't account for variability in incident complexity. Focusing evaluations solely on meeting compliance requirements: Compliance-focused evaluations may overlook practical response effectiveness and adaptability to unexpected situation nuances. Emphasizing the rapid completion of incident response exercises: Speed does not necessarily equate to effectiveness; comprehensive evaluation should prioritize thoroughness and correct action over mere speed.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
