Which of the following BEST enables an information security manager to determine the organization's level of incident management readiness?

The correct answer is C. Tabletop exercises. Tabletop exercises are the best method for determining an organization's incident management readiness because they simulate real-world scenarios and test the effectiveness of the incident response plan. These exercises help identify gaps, improve coordination, and enhance…

Submitted by haru.x· Apr 18, 2026Information Security Incident Management

Question

Options

AUpdated incident response policies
BExternal penetration testing
CTabletop exercises
DDevelopment of incident response playbooks

How the community answered

(67 responses)

A
3% (2)
B
3% (2)
C
88% (59)
D
6% (4)

Explanation

Tabletop exercises are the best method for determining an organization's incident management readiness because they simulate real-world scenarios and test the effectiveness of the incident response plan. These exercises help identify gaps, improve coordination, and enhance preparedness. While updated policies, penetration testing, and playbooks are valuable, they do not actively test the organization's ability to respond to incidents in a controlled setting.

Topics

#Incident Management Readiness#Tabletop Exercises#Incident Response Testing#Security Operations

Community Discussion

No community discussion yet for this question.

Full CISM Practice