312-49 · Question #232
An on-site incident response team is called to investigate an alleged case of computer tampering within their company. Before proceeding with the investigation, the CEO informs them that the…
The correct answer is A. One working day. Incident response policies typically classify incidents by severity level, each with a defined response time SLA. A 'low level' (or low severity) incident generally does not require immediate action but must still be addressed in a timely manner. Industry-standard frameworks…
Question
An on-site incident response team is called to investigate an alleged case of computer tampering within their company. Before proceeding with the investigation, the CEO informs them that the incident will be classified as low level. How long will the team have to respond to the incident?
Options
- AOne working day
- BTwo working days
- CImmediately
- DFour hours
How the community answered
(40 responses)- A93% (37)
- B5% (2)
- C3% (1)
Explanation
Incident response policies typically classify incidents by severity level, each with a defined response time SLA. A 'low level' (or low severity) incident generally does not require immediate action but must still be addressed in a timely manner. Industry-standard frameworks and many corporate incident response plans assign a response window of one working day for low-level incidents. Immediate response and four-hour windows are reserved for critical/high-severity incidents, while 'two working days' exceeds the typical expectation even for low-level events.
Topics
Community Discussion
No community discussion yet for this question.