Exam CISM Topic 6 Question 412 Discussion
Actual exam question for ISACA's CISM exam
Question #: 412
Topic #: 6
Question #: 412
Topic #: 6
A post-incident review should be conducted by an incident management team to determine:
Suggested Answer: B Vote an answer
Explanation/Reference:
Explanation:
Post-incident reviews are beneficial in determining ways to improve the response process through lessons learned from the attack. Evaluating the relevance of evidence, who launched the attack or what areas were affected are not the primary purposes for such a meeting because these should have been already established during the response to the incident.
Explanation:
Post-incident reviews are beneficial in determining ways to improve the response process through lessons learned from the attack. Evaluating the relevance of evidence, who launched the attack or what areas were affected are not the primary purposes for such a meeting because these should have been already established during the response to the incident.
by Julian at Jan 29, 2024, 08:34 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).