Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
When writing the tabletop scenario, construct it first and foremost as a structured series of situations that require each key participant to articulate and practice their specific role, authority, and communication path.
When developing a tabletop test plan for incident response testing, the PRIMARY purpose of the scenario should be to: Evaluate the effectiveness of the organization's incident response processes and identify gaps in coordination, communication, and decision-making. ✅ Why This Is the Correct Purpose: A tabletop exercise is a discussion-based simulation where team members walk through their roles during a hypothetical incident. The goal is not to test technical controls, but to: Validate incident response procedures Assess roles and responsibilities Improve communication and coordination Identify policy or process gaps before a real incident occurs 🧠 Pro Tip: Well-crafted tabletop scenarios should: Be realistic and relevant to your organization (e.g., ransomware, insider threat, cloud breach) Involve cross-functional teams (IT, legal, PR, HR, execs) Include injects that test decision-making under pressure Lead to an after-action report with lessons learned and action items
C. give the business a measure of the organization's overall readiness.