CISM · Question #935
At which stage of the incident management and response plan life cycle would the cost of an incident be calculated?
The correct answer is C. During the post-incident review process. The total cost of an incident - including downtime, remediation labor, legal fees, regulatory fines, and reputational damage - can only be fully tallied once the incident is resolved and all activities are complete. The post-incident review (also called the lessons learned…
Question
At which stage of the incident management and response plan life cycle would the cost of an incident be calculated?
Options
- AAfter the incident has been contained
- BUpon completion of forensic investigation
- CDuring the post-incident review process
- DOnce treatment options have been determined
How the community answered
(20 responses)- B5% (1)
- C95% (19)
Explanation
The total cost of an incident - including downtime, remediation labor, legal fees, regulatory fines, and reputational damage - can only be fully tallied once the incident is resolved and all activities are complete. The post-incident review (also called the lessons learned phase) compiles this financial picture alongside root cause findings and process improvements. Calculating cost during active response phases (containment, forensics, treatment) would be incomplete and premature.
Topics
Community Discussion
No community discussion yet for this question.