312-50V10 · Question #749
What is the process of logging, recording, and resolving events that take place in an organization?
The correct answer is A. Incident Management Process. Incident Management is the formal ITIL/security operations process responsible for logging, recording, and resolving events and incidents within an organization to restore normal service as quickly as possible.
Question
What is the process of logging, recording, and resolving events that take place in an organization?
Options
- AIncident Management Process
- BSecurity Policy
- CInternal Procedure
- DMetrics
How the community answered
(13 responses)- A92% (12)
- C8% (1)
Why each option
Incident Management is the formal ITIL/security operations process responsible for logging, recording, and resolving events and incidents within an organization to restore normal service as quickly as possible.
Incident Management Process is specifically defined in frameworks like ITIL and NIST SP 800-61 as the structured workflow for detecting, recording, classifying, and resolving incidents. It encompasses the full lifecycle from initial logging of an event through investigation and resolution, ensuring continuity and accountability.
A Security Policy defines the rules and requirements for protecting organizational assets, not the operational process of logging and resolving events.
Internal Procedures are step-by-step instructions for routine tasks and do not specifically describe the end-to-end lifecycle of event management and resolution.
Metrics are quantitative measurements used to evaluate performance or security posture, not a process for managing events.
Concept tested: Incident management process definition and scope
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf
Topics
Community Discussion
No community discussion yet for this question.