CISM Question 60

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  Continuous Improvement: Performing post-incident reviews (also known as Lessons Learned sessions) directly leverages real-world corporate data and actual events to identify gaps, mistakes, and successes in the incident response process.

• Chose C1

  I chose C because we are discussing training, D would have been my choice in general but ISACA loves to be specific on what stage you are in typically.

• Chose D1

  I would go for D since the post-incident is targering the awareness.