Which of the following is MOST important for an IS auditor to review when evaluating the effectiveness of an organization’s incident response process?

exams CISA CISA exam 0 Comments

Which of the following is MOST important for an IS auditor to review when evaluating the effectiveness of an organization’s incident response process?
A . Past incident response actions
B . Incident response staff experience and qualifications
C . Results from management testing of incident response procedures
D . Incident response roles and responsibilities

Answer: C