CISA Certified Information Systems Auditor – Question1087

What should be the MAIN goal of an organization’s incident response plan?

A.
Keep stakeholders notified of incident status.
B. Enable appropriate response according to criticality.
C. Correlate incidents from different systems.
D. Identify the root cause of the incident.

Correct Answer: D