nerdexam
Isaca

CISM · Question #935

At which stage of the incident management and response plan life cycle would the cost of an incident be calculated?

The correct answer is C. During the post-incident review process. The total cost of an incident - including downtime, remediation labor, legal fees, regulatory fines, and reputational damage - can only be fully tallied once the incident is resolved and all activities are complete. The post-incident review (also called the lessons learned…

Submitted by marco_it· Apr 18, 2026Information Security Incident Management

Question

At which stage of the incident management and response plan life cycle would the cost of an incident be calculated?

Options

  • AAfter the incident has been contained
  • BUpon completion of forensic investigation
  • CDuring the post-incident review process
  • DOnce treatment options have been determined

How the community answered

(20 responses)
  • B
    5% (1)
  • C
    95% (19)

Explanation

The total cost of an incident - including downtime, remediation labor, legal fees, regulatory fines, and reputational damage - can only be fully tallied once the incident is resolved and all activities are complete. The post-incident review (also called the lessons learned phase) compiles this financial picture alongside root cause findings and process improvements. Calculating cost during active response phases (containment, forensics, treatment) would be incomplete and premature.

Topics

#Incident Management Life Cycle#Post-Incident Review#Incident Cost Calculation

Community Discussion

No community discussion yet for this question.

Full CISM Practice