Which of the following is MOST important when responding to a major security incident?

The correct answer is C. Following the escalation process. Following the escalation process ensures a structured and timely response to a major security incident. It activates the appropriate resources, roles, and decision-making levels, which is critical for effective containment, communication, and recovery.

Submitted by olafpl· Apr 18, 2026Information Security Incident Management

Question

Options

AContacting forensic investigators
BNotifying law enforcement
CFollowing the escalation process
DIdentifying the indicators of compromise

How the community answered

(38 responses)

A
16% (6)
B
5% (2)
C
76% (29)
D
3% (1)

Explanation

Following the escalation process ensures a structured and timely response to a major security incident. It activates the appropriate resources, roles, and decision-making levels, which is critical for effective containment, communication, and recovery.

Topics

#Incident Response#Escalation Process#Major Security Incident#Incident Management Process

Community Discussion

No community discussion yet for this question.

Full CISM Practice