GCIH · Question #279
Adam works as an Incident Handler for Umbrella Inc. His recent actions towards the incident are not up to the standard norms of the company. He always forgets some steps and procedures while…
The correct answer is C. Create incident checklists. Creating incident checklists is the most efficient way to ensure all incident response steps are completed consistently without adding significant administrative burden.
Question
Adam works as an Incident Handler for Umbrella Inc. His recent actions towards the incident are not up to the standard norms of the company. He always forgets some steps and procedures while handling responses as they are very hectic to perform. Which of the following steps should Adam take to overcome this problem with the least administrative effort?
Options
- ACreate incident manual read it every time incident occurs.
- BAppoint someone else to check the procedures.
- CCreate incident checklists.
- DCreate new sub-team to keep check.
How the community answered
(20 responses)- B5% (1)
- C85% (17)
- D10% (2)
Why each option
Creating incident checklists is the most efficient way to ensure all incident response steps are completed consistently without adding significant administrative burden.
Reading an incident manual each time an incident occurs is time-consuming and increases cognitive load during a hectic response, representing high administrative effort rather than the least effort.
Appointing another person to verify procedures adds staffing overhead and creates a dependency that may not be available during every incident.
Incident checklists are a proven, low-overhead tool recommended by incident response frameworks such as NIST SP 800-61, ensuring that all required steps are followed in the correct sequence during stressful incidents. They require a one-time creation effort and can be reused for every subsequent incident without additional personnel, delegation, or review of lengthy documentation.
Creating a sub-team incurs significant administrative, training, and coordination overhead, far exceeding what is needed to solve a procedural consistency problem.
Concept tested: Incident response checklist and least administrative effort
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf
Topics
Community Discussion
No community discussion yet for this question.