Exam CISM topic 1 question 59 discussion

A communication plan outlines how information will be shared with various stakeholders during incident response. It defines the protocols, channels, and frequency of communication, as well as specifies what information is shared with different entities. This plan helps ensure that relevant and accurate information is provided to the appropriate parties in a timely and organized manner. While escalation procedures (option A), disaster recovery policy (option C), and business continuity plan (BCP) (option D) are important components of an overall incident response and recovery strategy, a communication plan specifically addresses the sharing of information during an incident, making it the most relevant choice for determining what information should be shared with different entities.

A communication plan outlines the strategies, channels, and protocols for sharing information with various stakeholders during an incident or emergency. It helps ensure that the right information reaches the right people at the right time and in the right way, which is crucial for effective incident response. While the other options, such as escalation procedures, disaster recovery policy, and business continuity plan, are important components of incident response, they do not specifically address the issue of determining what information should be shared with different entities.

A, Escalation Procedures

B. Communication plan