Which of the following would BEST help to determine incident response readiness?

Question

Options

• ANumber of incidents reported by end users
• BAmount of funding allocated for incident response
• CNumber of scenarios addressed during tabletop testing
• DTime spent by legal team on readiness exercises

• A
  2% (1)
• B
  10% (5)
• C
  83% (40)
• D
  4% (2)

Explanation

Tabletop testing scenarios directly measure preparedness - they simulate real incidents and expose gaps in processes, communication, and decision-making before an actual event occurs, making them the most actionable indicator of readiness. The number of user-reported incidents (A) reflects historical activity, not preparation - a quiet period could mean good security or poor detection. Funding (B) is an input resource, not a readiness metric; money doesn't guarantee effective response capability. Legal team time (D) is too narrow - incident response is a cross-functional discipline, and legal participation alone doesn't reflect overall organizational readiness.

Memory tip: Think of tabletop exercises as "practice games before the championship" - the more realistic scenarios your team has rehearsed, the more ready they are. When you see readiness questions, look for the answer that tests execution, not resources or history.

No community discussion yet for this question.