PECB
LEAD-IMPLEMENTER · Question #25
The incident management process of an organization enables them to prepare for and respond to information security incidents. In addition, the organization has procedures in place for assessing…
The correct answer is A. Processes for using knowledge gained from information security incidents. See the full explanation below for the reasoning.
Question
The incident management process of an organization enables them to prepare for and respond to information security incidents. In addition, the organization has procedures in place for assessing information security events. According to ISO/IEC 27001, what else must an incident management process include?
Options
- AProcesses for using knowledge gained from information security incidents
- BEstablishment of two information security incident response teams
- CProcesses for handling information security incidents of suppliers as defined in their agreements
How the community answered
(27 responses)- A70% (19)
- B19% (5)
- C11% (3)
Community Discussion
No community discussion yet for this question.