210-255 · Question #134
What define the roadmap for implementing the incident response plan?
The correct answer is A. Incident response plan. The incident response plan is the document that provides the roadmap for implementing an organization's IR program, bridging high-level policy and operational procedures.
Question
What define the roadmap for implementing the incident response plan?
Options
- AIncident response plan
- BIncident response policy
- CIncident response procedures
How the community answered
(40 responses)- A95% (38)
- B3% (1)
- C3% (1)
Why each option
The incident response plan is the document that provides the roadmap for implementing an organization's IR program, bridging high-level policy and operational procedures.
According to NIST SP 800-61, the incident response plan provides a roadmap for implementing the IR capability and is built upon the directives established in the IR policy. It defines the overall structure, goals, and organizational commitment needed to operationalize IR. The plan occupies the middle tier of the IR documentation hierarchy, sitting between the policy and the detailed procedures.
The incident response policy establishes management's high-level commitment and authority for IR, but it does not serve as the operational roadmap for implementing the IR program.
Incident response procedures provide detailed step-by-step instructions for specific tasks during an incident, not the broader roadmap for standing up and managing the IR capability.
Concept tested: Incident response plan vs policy vs procedures hierarchy
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf
Topics
Community Discussion
No community discussion yet for this question.