CISA Certified Information Systems Auditor – Question2610

Which of the following is MOST important to include in an organization’s incident response plan to help prevent similar incidents from happening in the future?

A.
Documentation of incident details
B. Incident closure procedures
C. Containment and neutralization actions
D. Post-incident review

Correct Answer: D