Which of the following BEST supports effective and timely incident response?

The correct answer is A. Having a documented incident response plan in place. A documented incident response plan is the foundation of any effective and timely incident response capability. It establishes pre-defined roles, responsibilities, communication channels, escalation paths, and procedures so that responders can act immediately without…

Submitted by diego_uy· Apr 18, 2026Information Security Incident Management

Question

Options

AHaving a documented incident response plan in place
BInvolving internal and external stakeholders
CAppointing a forensic incident response specialist
DMaintaining a SIEM solution

How the community answered

(49 responses)

A
90% (44)
B
2% (1)
C
6% (3)
D
2% (1)

Explanation

A documented incident response plan is the foundation of any effective and timely incident response capability. It establishes pre-defined roles, responsibilities, communication channels, escalation paths, and procedures so that responders can act immediately without improvising under pressure. Stakeholder involvement (B) is important but secondary; it works best when guided by a plan. A forensic specialist (C) is a tactical resource, not a strategic enabler. A SIEM (D) is a detection and monitoring tool, not a response framework. Without a documented plan, all other elements lack structure and coordination.

Topics

#Incident Response Plan#Incident Management#Security Preparedness#Security Planning

Community Discussion

No community discussion yet for this question.

Full CISM Practice