Exam CS0-003 topic 1 question 32 discussion

Not a ChatGPT answer: The Incident Response Plan (IRP) is exactly what the name says... a Plan, follow it. Turns out we take tons of time to ensure that these plans are extremely in-depth. When writing mine I gave it to my most junior members to run through a scenario. We don't tell people we don't need to

The answer is A. The lead should review what is documented in the incident response policy or plan, as it should outline the escalation process and who should be communicated with during a security incident.

ChatGPT

The incident response policy or plan is a document that defines the roles and responsibilities, procedures and processes, communication and escalation protocols, and reporting and documentation requirements for handling security incidents. The incident response policy or plan should also be aligned with the organizational policies and legal obligations regarding incident notification and disclosure.