After a devastating office fire, all staff are moved to other branches of the company. At what moment in the incident management process is this measure effectuated?

After a devastating office fire, all staff are moved to other branches of the company. At what moment in the incident management process is this measure effectuated?
A . Between incident and damage
B . Between detection and classification
C . Between recovery and normal operations
D . Between classification and escalation

View Answer

Answer: A

Explanation:

After a devastating office fire, all staff are moved to other branches of the company. This measure is effectuated between incident and damage in the incident management process. Incident management is the process of detecting, investigating, and responding to incidents in as little time as possible. An incident is any disruption to a service or workflow. A fire is an example of an incident that can cause severe damage to the organization’s assets, operations, and reputation. The incident management process consists of five steps: detection, classification, escalation, recovery, and closure2. The measure of moving staff to other branches is a form of recovery action that aims to restore normal service and minimize impact to the business. However, this measure is taken before the damage caused by the fire is fully assessed or contained. Therefore, this measure is effectuated between incident and damage in the incident management process.

Reference: ISO/IEC 27000:2022, clause 3.24; Atlassian.