CISA Certified Information Systems Auditor – Question1029

The prioritization of incident response actions should be PRIMARILY based on which of the following?

A.
Scope of disaster
B. Business impact
C. Availability of personnel
D. Escalation process

Correct Answer: B