Multiple choice

Which should be included as a part of a computer security incident response capability (CSIRC)?

  1. List how incidents be handled based on mission & functions

  2. Prioritize severity ratings of security incidents

  3. Create definition of roles, resp, & levels of auth

  4. Develop metrics to measure incident response & effectiveness
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Developing metrics is essential for evaluating the performance and effectiveness of an incident response team, allowing for continuous improvement.

Keep practicing — related questions