If the investigation of an incident is not completed within the time allocated in the incident response plan, which of the following actions should be taken by the incident response team?

The correct answer is C. Initiate the escalation process.. If an incident investigation is not completed within the time allocated in the incident response plan, the incident response team should initiate the escalation process. This involves alerting higher-level management or additional resources to ensure the incident is addressed pro

Submitted by packet_pusher· Apr 18, 2026Information Security Incident Management

Question

Options

AInvoke the business continuity plan (BCP).
BEngage the crisis management team.
CInitiate the escalation process.
DContinue the investigation.

How the community answered

(23 responses)

A
4% (1)
B
9% (2)
C
83% (19)
D
4% (1)

Explanation

If an incident investigation is not completed within the time allocated in the incident response plan, the incident response team should initiate the escalation process. This involves alerting higher-level management or additional resources to ensure the incident is addressed promptly and appropriately.

Topics

#Incident Escalation#Incident Response Procedures#Incident Management#Incident Timelines

Community Discussion

No community discussion yet for this question.

Full CISM Practice