CISM Certified Information Security Manager – Question1503

Which of the following is the PRIMARY goal of an incident response team during a security incident?

A.
Ensure the attackers are detected and stopped
B. Minimize disruption to business-critical operations
C. Maintain a documented chain of evidence
D. Shut down the affected systems to limit the business impact

Correct Answer: B