CISM Certified Information Security Manager – Question1436

Which of the following would be MOST helpful to reduce the amount of time needed by an incident response team to determine appropriate actions?

A.
Providing annual awareness training regarding incident response for team members
B. Defining incident severity levels during a business impact analysis (BIA)
C. Validating the incident response plan against industry best practices
D. Rehearsing incident response procedures, roles, and responsibilities

Correct Answer: D