CISM · Question #912
Which of the following is the MOST important consideration for an incident response team seeking to limit the impact of incidents?
The correct answer is D. Understanding of the organization's operational requirements. To limit the impact of an incident, the response team must understand what systems, processes, and services are critical to the organization's operations. This knowledge drives prioritization - which systems to contain first, what to restore first, and what trade-offs are accepta
Question
Which of the following is the MOST important consideration for an incident response team seeking to limit the impact of incidents?
Options
- ASenior management's understanding of the risk appetite
- BYear-to-year analysis of incident response training completion
- CAllocation of funding assigned to incident management functions
- DUnderstanding of the organization's operational requirements
How the community answered
(20 responses)- A5% (1)
- B5% (1)
- C15% (3)
- D75% (15)
Explanation
To limit the impact of an incident, the response team must understand what systems, processes, and services are critical to the organization's operations. This knowledge drives prioritization - which systems to contain first, what to restore first, and what trade-offs are acceptable during recovery. Without understanding operational requirements, the team cannot make effective triage decisions. Senior management's risk appetite (A), training completion rates (B), and funding (C) are all relevant but secondary to knowing what actually matters to the business operationally.
Topics
Community Discussion
No community discussion yet for this question.