CISM Question 236

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Its literally called incident response. Something happens then a response just like corrective control. Its C

• Chose C1

  I thought detective is part of the NOC or SOC team. When incident detected and require escalation, which might trigger IRT to be involved.

• Chose C2

  Its a corrective control and not detective control. Question is about Incident RESPONSE team.