Which of the following activities would be MOST beneficial to evaluate personnel’s familiarity with incident response procedures?

An organization developed a comprehensive incident response policy. Executive management approved the policy and its associated procedures.

Which of the following activities would be MOST beneficial to evaluate personnel’s familiarity with incident response procedures?
A . A simulated breach scenario involving the incident response team
B . Completion of annual information security awareness training by all employees
C . Tabletop activities involving business continuity team members
D . Completion of lessons-learned documentation by the computer security incident response team
E . External and internal penetration testing by a third party

View Answer

Answer: A