Which of the following is a best practice for security incident response?

Question

Options

• AIgnoring security incidents to avoid drawing attention to them
• BWaiting until an incident occurs to develop an incident response plan
• CNone of the above
• DHaving a clearly defined incident response plan in place

• A
  3% (1)
• B
  5% (2)
• C
  3% (1)
• D
  90% (36)

Explanation

Having a clearly defined incident response plan (IRP) in place before an incident occurs is a fundamental best practice. An IRP ensures that when a security incident happens, the team knows exactly what steps to take, who is responsible, and how to contain and recover - reducing confusion, response time, and damage. Option A (ignoring incidents) is dangerous and can lead to regulatory violations and greater harm. Option B (waiting until an incident to plan) leaves the organization unprepared and reactive. Option C ('none of the above') is incorrect because D is clearly a valid best practice.

No community discussion yet for this question.