CISM Question 44

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  While practical, I think DR tests are narrow in scope. They get to a restoration state. In a tabletop you can theorise about threat detection, containment, legal compliance, public relations handling - a wide variety of scenarios - which appears to be the ask

• Chose A3

  Tabletop exercises are simulated, interactive sessions where team members discuss and role-play their responses to various security incidents. These exercises help the incident response team practice and refine their incident response plans, communication strategies, and decision-making processes in a controlled environment. Tabletop exercises are valuable for preparing teams to handle a range of information security scenarios without the actual impact or disruption that may occur during live incidents. While options like forensics certification (option B), penetration tests (option C), and disaster recovery drills (option D) are important for specific aspects of information security, tabletop exercises offer a holistic approach to testing and improving the overall incident response capabilities of a team.

• 1

  I choose A as answer but I think DRP drill is more correct because an incident response plan is part of a DRP. DRP drills will definitely prepare for likely scenarios.