nerdexam
GIAC

GCIH · Question #462

In the event there is a disagreement on the events of the incident, how should it be handled in the final report?

The correct answer is A. Have the dissenting individual(s) write and sign a statement detailing the alternate version of. If anyone has a strong disagreement about the facts of the matter, he can submit that, and his statement can remain a part of the incident record. It is better to find out that you have a lack of consensus before going to court than during court.

Incident Response & Cyber Kill Chain

Question

In the event there is a disagreement on the events of the incident, how should it be handled in the final report?

Options

  • AHave the dissenting individual(s) write and sign a statement detailing the alternate version of
  • BContinue negotiations until all disagreements about events are resolved before submitting the
  • COmit any facts or events in dispute entirely from the final report
  • DSubmit the report with the version of events agreed upon by the majority of team members

How the community answered

(31 responses)
  • A
    94% (29)
  • B
    3% (1)
  • C
    3% (1)

Explanation

If anyone has a strong disagreement about the facts of the matter, he can submit that, and his statement can remain a part of the incident record. It is better to find out that you have a lack of consensus before going to court than during court.

Topics

#incident report#documentation#dissenting statement#incident procedures

Community Discussion

No community discussion yet for this question.

Full GCIH Practice