The Chief Information Security Officer (CISO) of a bank recently updated the incident response policy. The
CISO is concerned that members of the incident response team do not understand their roles. The bank wants
to test the policy but with the least amount of resources or impact. Which of the following BEST meets the
requirements?


A. Warm site failover
B. Tabletop walk-through
C. Parallel path testing
D. Full outage simulation