nerdexam
Isaca

CISM · Question #482

Which of the following is the BEST way to enhance an organization's incident management capability?

The correct answer is B. Implement lessons learned from post-incident reviews. The best way to enhance an organization’s incident management capability is to implement lessons learned from post-incident reviews. This process allows the organization to identify weaknesses, refine response strategies, and continuously improve its incident management…

Submitted by yuki_2020· Apr 18, 2026Information Security Incident Management

Question

Which of the following is the BEST way to enhance an organization's incident management capability?

Options

  • AAlign the incident response plan with the business plan.
  • BImplement lessons learned from post-incident reviews.
  • CPerform a business impact analysis (BIA).
  • DBenchmark against industry best practices.

How the community answered

(35 responses)
  • A
    14% (5)
  • B
    77% (27)
  • C
    3% (1)
  • D
    6% (2)

Explanation

The best way to enhance an organization’s incident management capability is to implement lessons learned from post-incident reviews. This process allows the organization to identify weaknesses, refine response strategies, and continuously improve its incident management procedures. While aligning with business plans, performing a BIA, and benchmarking against industry best practices are valuable, acting on lessons learned from real incidents provides direct improvements to the organization's response effectiveness.

Topics

#Incident Management#Continuous Improvement#Lessons Learned#Post-Incident Review

Community Discussion

No community discussion yet for this question.

Full CISM Practice