CISM Certified Information Security Manager – Question1438

The MOST important reason to have a well-documented and tested incident response plan in place is to:

A.
standardize the chain of custody procedure
B. facilitate the escalation process
C. promote a coordinated effort.
D. outline external communications

Correct Answer: C