CISM · Question #85
The categorization of incidents is MOST important for evaluating which of the following?
The correct answer is B. Risk severity and incident priority. Categorizing incidents is most crucial for assessing their risk severity and assigning appropriate priority for remediation.
Question
The categorization of incidents is MOST important for evaluating which of the following?
Options
- AAppropriate communication channels
- BRisk severity and incident priority
- CAllocation of needed resources
- DResponse and containment requirements
How the community answered
(52 responses)- A4% (2)
- B94% (49)
- D2% (1)
Why each option
Categorizing incidents is most crucial for assessing their risk severity and assigning appropriate priority for remediation.
While communication channels are determined by the incident, categorization itself doesn't primarily evaluate the channels but rather the incident's impact.
Incident categorization involves classifying incidents based on type, impact, and scope, which directly informs the assessment of the risk posed by the incident and helps determine its priority relative to other events. This allows organizations to allocate resources and respond effectively according to the actual threat level.
Resource allocation is a consequence of prioritization, which is informed by categorization, but categorization's primary output is the severity and priority itself.
Response and containment requirements are determined by the incident's characteristics and priority, not directly evaluated by the categorization process itself.
Concept tested: Incident categorization for risk and priority
Source: https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final
Topics
Community Discussion
No community discussion yet for this question.