nerdexam
Isaca

CISM · Question #85

The categorization of incidents is MOST important for evaluating which of the following?

The correct answer is B. Risk severity and incident priority. Categorizing incidents is most crucial for assessing their risk severity and assigning appropriate priority for remediation.

Submitted by satoshi_tk· Apr 18, 2026Information Security Incident Management

Question

The categorization of incidents is MOST important for evaluating which of the following?

Options

  • AAppropriate communication channels
  • BRisk severity and incident priority
  • CAllocation of needed resources
  • DResponse and containment requirements

How the community answered

(52 responses)
  • A
    4% (2)
  • B
    94% (49)
  • D
    2% (1)

Why each option

Categorizing incidents is most crucial for assessing their risk severity and assigning appropriate priority for remediation.

AAppropriate communication channels

While communication channels are determined by the incident, categorization itself doesn't primarily evaluate the channels but rather the incident's impact.

BRisk severity and incident priorityCorrect

Incident categorization involves classifying incidents based on type, impact, and scope, which directly informs the assessment of the risk posed by the incident and helps determine its priority relative to other events. This allows organizations to allocate resources and respond effectively according to the actual threat level.

CAllocation of needed resources

Resource allocation is a consequence of prioritization, which is informed by categorization, but categorization's primary output is the severity and priority itself.

DResponse and containment requirements

Response and containment requirements are determined by the incident's characteristics and priority, not directly evaluated by the categorization process itself.

Concept tested: Incident categorization for risk and priority

Source: https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final

Topics

#Incident Categorization#Incident Priority#Risk Severity#Incident Management Process

Community Discussion

No community discussion yet for this question.

Full CISM Practice