CISM Question 64

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  The effectiveness of an incident response team is greatest when the incident response process is regularly reviewed and updated based on lessons learned from previous incidents. Continuous improvement of the incident response process ensures that the team is better prepared to handle and mitigate future incidents.

• Chose A2

  Continuous improvement is crucial for enhancing the effectiveness of an incident response team. Regularly updating the incident response process based on lessons learned from previous incidents ensures that the team evolves and adapts to emerging threats and challenges. By incorporating feedback and insights from real incidents, the team becomes more proactive and better prepared to handle future incidents. While having trained security personnel (option B), regular meetings to review log files (option C), and using a security information and event monitoring (SIEM) system to identify incidents (option D) are important components of effective incident response, the ongoing refinement of the incident response process based on lessons learned is a fundamental factor in maximizing effectiveness.

• 2

  A. the incident response process is updated based on lessons learned.