Exam CRISC topic 1 question 753 discussion

The GREATEST concern among the options provided would depend on the specific context and priorities of the organization. However, in many cases, "D. Roles and responsibilities are not clearly defined" could be considered the most critical concern. Having clearly defined roles and responsibilities is crucial in an incident response plan because it ensures that everyone involved knows what they are expected to do during an incident. This clarity helps prevent confusion, delays, and mistakes during a high-stress situation. Without clear roles and responsibilities, the coordination and efficiency of the incident response process could be compromised. While the other options (outsourcing incident response capability, teams not being operational until an incident occurs, and not all employees attending training) are also important considerations, the lack of clear roles and responsibilities could have a more immediate and direct impact on the effectiveness of the incident response efforts.

Agree with D.