CISA Certified Information Systems Auditor – Question0512

Which of the following is the BEST way for management to ensure the effectiveness of the cybersecurity incident response process?

A.
Periodic update of incident response process documentation
B. Periodic reporting of cybersecurity incidents to key stakeholders
C. Periodic tabletop exercises involving key stakeholders
D. Periodic cybersecurity training for staff involved in incident response

Correct Answer: C