(ISC)2
CCSP · Question #878
In an incident response framework, what is typically the first phase?
The correct answer is C. Preparation. Before any incident occurs, organizations prepare by defining policies, building teams, and planning. Only after this can they identify, contain, and recover from incidents.
Submitted by ricky.ec· Apr 18, 2026Cloud Security Operations
Question
In an incident response framework, what is typically the first phase?
Options
- AIdentification of the incident
- BContainment of the incident
- CPreparation
- DRecovery
How the community answered
(30 responses)- A3% (1)
- C93% (28)
- D3% (1)
Explanation
Before any incident occurs, organizations prepare by defining policies, building teams, and planning. Only after this can they identify, contain, and recover from incidents.
Topics
#Incident Response#Incident Response Framework#Preparation Phase#Security Operations
Community Discussion
No community discussion yet for this question.