CERTIFIED-IN-CYBERSECURITY · Question #564
Which of the following is typically NOT a member of an incident response team?
The correct answer is A. HR representatives. A typical incident response team (IRT) is composed of members who have direct operational, legal, communication, or technical roles during a security incident. Engineering/technical representatives (B) investigate and remediate the incident. Legal representatives (D) handle…
Question
Which of the following is typically NOT a member of an incident response team?
Options
- AHR representatives
- BEngineering representatives
- CPR representatives
- DLegal representatives
How the community answered
(55 responses)- A93% (51)
- B2% (1)
- C4% (2)
- D2% (1)
Explanation
A typical incident response team (IRT) is composed of members who have direct operational, legal, communication, or technical roles during a security incident. Engineering/technical representatives (B) investigate and remediate the incident. Legal representatives (D) handle regulatory obligations, law enforcement liaison, and liability. PR/Communications representatives (C) manage external messaging and reputational risk. HR representatives (A) are generally not a standard core IRT member - their involvement is typically only needed in edge cases such as insider threat investigations. Most IR frameworks (NIST SP 800-61, SANS) do not list HR as a default IRT role.
Topics
Community Discussion
No community discussion yet for this question.