Which of the following is the BEST way to determine the readiness of an incident management team?

The correct answer is D. Performing simulated testing at determined intervals. Simulated testing (e.g., tabletop exercises and drills) is the best way to determine readiness because it validates roles, procedures, coordination, and decision-making under realistic conditions, revealing practical gaps that metrics, surveys, or past audit findings may miss.

Submitted by asante_acc· Apr 18, 2026Information Security Incident Management

Question

Options

AEvaluating previous incident response statistics
BPerforming regular self-assessment surveys
CEvaluating previous independent audit issues
DPerforming simulated testing at determined intervals

How the community answered

(39 responses)

A
3% (1)
B
5% (2)
C
18% (7)
D
74% (29)

Explanation

Simulated testing (e.g., tabletop exercises and drills) is the best way to determine readiness because it validates roles, procedures, coordination, and decision-making under realistic conditions, revealing practical gaps that metrics, surveys, or past audit findings may miss.

Topics

#Incident Management#Team Readiness#Simulation Testing#Incident Response

Community Discussion

No community discussion yet for this question.

Full CISM Practice