Exam CFR-310 topic 1 question 74 discussion

D. Incident response plan. An Incident Response Plan (IRP) is specifically designed to guide security personnel through the detection, containment, eradication, recovery, and review of security incidents. It provides the best practices for handling and recovering from security incidents in a structured and effective manner. Here’s a breakdown of the other options: A. Crisis communication plan: This focuses on how to communicate during a crisis, ensuring that the right information reaches stakeholders, but it doesn’t provide specific steps for recovering from security incidents. B. Disaster recovery plan: This is more focused on restoring IT infrastructure and systems after a disaster (like a natural disaster or major outage), not specifically on security incidents. C. Occupant emergency plan: This is geared toward the physical safety of people in the event of emergencies like fires or natural disasters, not security incident recovery.