Which of the following is true regarding an incident-response plan?
A)The plan should provide decentralized reporting of all security incidents.
B)The plan should require minimal training on the part of employees.
C)The plan should identify critical personnel and their off-hours contact information.
D)The plan should be simple enough to ensure a fast response with limited practice.

Question

Quizplus · Accepted Answer

It is important for an incident-response plan to identify critical personnel and their off-hours contact information, so that the appropriate personnel can be contacted in a timely manner in case of an incident. Option A is incorrect, as incidents should be reported centrally to ensure consistency in reporting and analysis. Option B is incorrect, as the plan should require sufficient training to ensure that employees know how to respond to incidents. Option D is incorrect, as the plan should be comprehensive enough to cover all possible scenarios and require regular practice to ensure preparedness.

Which of the Following Is True Regarding an Incident-Response Plan