nerdexam
Isaca

CISM · Question #312

Which of the following will BEST enable an organization to meet incident response requirements when outsourcing its incident response function?

The correct answer is A. Including response times in service level agreements (SLAs). Including response times in SLAs ensures that the outsourced incident response provider meets the organization's expectations for timely actions during an incident. This is critical for maintaining the effectiveness and efficiency of the response process.

Submitted by ravi_2018· Apr 18, 2026Information Security Incident Management

Question

Which of the following will BEST enable an organization to meet incident response requirements when outsourcing its incident response function?

Options

  • AIncluding response times in service level agreements (SLAs)
  • BContracting with a well-known incident response provider
  • CIncluding a right-to-audit clause in service level agreements (SLAs)
  • DRequiring comprehensive response applications and tools

How the community answered

(40 responses)
  • A
    85% (34)
  • B
    8% (3)
  • C
    3% (1)
  • D
    5% (2)

Explanation

Including response times in SLAs ensures that the outsourced incident response provider meets the organization's expectations for timely actions during an incident. This is critical for maintaining the effectiveness and efficiency of the response process.

Topics

#Incident Response Outsourcing#Service Level Agreements (SLAs)#Contract Management#Performance Metrics

Community Discussion

No community discussion yet for this question.

Full CISM Practice