Exam CISM topic 1 question 910 discussion

My answer is D. Not sure the correct answer given us A. Option A is actually focused on adherence to policies, controls, and regulatory requirements, but they don’t necessarily evaluate the plan’s practical execution or its alignment with business needs.

D. Conducting a tabletop exercise

D. Conducting a tabletop exercise

D. Conducting a tabletop exercise Conducting a tabletop exercise is generally considered the best way to determine the effectiveness of an incident response plan. Tabletop exercises simulate real-world incidents in a controlled environment, allowing organizations to assess how well their incident response plan works in practice. During a tabletop exercise, participants can identify weaknesses in the plan, test the communication and coordination among team members, and identify areas for improvement. This hands-on approach provides valuable insights and helps organizations refine their incident response plan to ensure it is effective when a real incident occurs.

Agreed, this must be D

for me D

D for sure

A tabletop exercise is a simulation of a security incident that allows the organization to test its incident response plan and evaluate its effectiveness. During the exercise, the incident response team and other relevant stakeholders can work through a hypothetical scenario to identify any weaknesses or gaps in the plan and make improvements as needed. This can help to ensure that the organization is prepared to respond effectively to a real security incident.