CISM Certified Information Security Manager – Question1307

When developing a classification method for incidents, the categories MUST be:

A.
quantitatively defined.
B. regularly reviewed.
C. specific to situations.
D. assigned to incident handlers.

Correct Answer: A