CISM Certified Information Security Manager – Question1364

What is the PRIMARY objective of a post-event review in incident response?

A.
Adjust budget provisioning
B. Preserve forensic data
C. Improve the response process
D. Ensure the incident is fully documented

Correct Answer: C

Explanation:

Explanation:
The primary objective is to find any weakness in the current process and improve it. The other choices are all secondary.