Certified Information Security Manager CISM · Free Practice Question Easy
Question 96
A CISO is building a new incident response capability. All of the following resources are required except which one?
- A Forensic tools or a retainer with a forensic investigator
- B Training for incident responders
- C Written agreements with local and national law enforcement
- D Incident response policy and procedures
Reveal correct answer
Correct answer: C
Explanation
Correct Answer:
Written agreements with local and national law enforcement is correct. Although relationships with law enforcement are useful, no written agreements with them should be required.
Incorrect Answers:
The remaining answers are incorrect. Incident response capabilities require forensic tools and personnel (or a retainer with an outside forensic firm), training, and policies and procedures.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
