Study. uk . com
  1. Home
  2. All questions
  3. Question 71

CompTIA Security+ study material · question 71 of 611

Which parties should an incident response plan identify before an incident occurs?

  1. Only the internal response team members
  2. The organisation's competitors and industry press
  3. Legal counsel, the insurer, law enforcement and the relevant regulator
  4. Every supplier the organisation uses
Show the answer

Answer: C. Legal counsel, the insurer, law enforcement and the relevant regulator

Naming external parties in advance avoids improvising those calls while the incident is running.

Source: NIST SP 800-61 Rev. 2 (NIST) — SP 800-61 Rev. 2 § 2.3.4 Incident Response Team Dependencies

Challenge yourself on this topic → Study as cards