An Organization Developed a Comprehensive Incident Response Policy

question 94

Multiple Choice

An organization developed a comprehensive incident response policy. Executive management approved the policy and its associated procedures. Which of the following activities would be MOST beneficial to evaluate personnel's familiarity with incident response procedures?

• A) A simulated breach scenario involving the incident response team
• B) Completion of annual information security awareness training by all employees
• C) Tabletop activities involving business continuity team members
• D) Completion of lessons-learned documentation by the computer security incident response team
• E) External and internal penetration testing by a third party

---

Definitions:

Manage Risk

The systematic process of identifying, analyzing, and responding to potential risks to minimize their impact on an organization.

Contingency Plan

A strategy designed to take into account future events or circumstances that could affect the operation of a business, ensuring preparedness for unexpected challenges.

Marketing Plans

Marketing plans are comprehensive documents outlining a business's strategy for promoting its products or services, including targets, tactics, and budget allocations for a specific period.

Target Segments

Specific groups of potential customers that a company aims to reach with its products and marketing strategies.