Exam CISM topic 1 question 990 discussion

D. Create a clear definition of incident classifications.

By obtaining senior management buy-in for incident response processes, it ensures that there is a clear understanding and agreement from senior management on the importance of escalating security incidents. This helps in establishing a clear chain of command and decision-making process, which can streamline the incident response efforts. When senior management is involved and supportive of the incident response processes, it becomes easier for information security management and the affected business unit management to come to an agreement on when to escalate incidents. This ultimately prevents conflicts and delays in responding to security incidents.