CISM Certified Information Security Manager – Question0509 - CISM Certified Information Security Manager

When developing a tabletop test plan for incident response testing, the PRIMARY purpose of the scenario should be to:

A. give the business a measure of the organization’s overall readiness
B. provide participants with situations to ensure understanding of their roles
C. measure management engagement as part of an incident response team
D. challenge the incident response team to solve the problem under pressure

Correct Answer: C

Explanation:

Explanations Tabletop scenarios that need to be completed with one hour per scenario using full escalation as per decision trees to accurately simulate and evaluate responses of each team member and the processes within the playbooks.