Which of the following BEST ensures prompt and effective communication during incidents?

Question

Options

• AUsing instant communication technologies
• BIncluding a communication phase in the incident management process
• CConducting regular security awareness training
• DPeriodic testing of the incident response plan

• B
  96% (22)
• C
  4% (1)

Explanation

Including a communication phase in the incident management process (B) ensures prompt and effective communication because it institutionalizes communication as a mandatory, structured step - not an afterthought - within every incident response, guaranteeing it happens consistently regardless of who is handling the incident.

Why the distractors are wrong:

• A (Instant communication technologies) addresses the tool, not the process - having Slack or a hotline means nothing if there's no defined phase that triggers its use.
• C (Security awareness training) improves general security posture and user behavior, but doesn't directly govern how teams communicate during an active incident.
• D (Periodic testing) validates that the plan works, but testing alone doesn't embed communication into the actual response workflow.

Memory tip: Think of it this way - technology and training are enablers, testing is validation, but only a defined process phase mandates the action. When a question asks what "ensures" something happens in incident response, look for the answer that makes it a required step in the process, not just a capability or habit.

No community discussion yet for this question.