Exam CIS-SIR topic 1 question 33 discussion

A. To understand desired outcomes The book emphasizes the importance of starting with the end in mind to understand the desirable outcome. This helps in framing the discussion and leads to questions about the tools and processes that will be needed to achieve those outcomes. So, option A is the most appropriate answer in this context.

Sorry for the previous response, the answer is in the last sentence: According to the Ebook of Security Incident Response ( Tokyo ) page 35: Most discussions will tend to focus on process ( "How do we do this?" ) but it helps to begin with the end in mind: "why is this needed? " to try and define the desirable outcome. FROM THERE, EXPECT TO DERIVE QUESTIONS ABOUT WHAT THE TOOLSETS (PRODUCT) WILL LOOK LIKE: WHAT DO PEOPLE SEE? HOW WILL IT BE PRESENTED? WHAT CAN MAKE PEOPLE PRODUCTIVE? Therefore the correct answer cannot be C but D.

Sorry for the previous response, the answer is in the last sentence: According to the Ebook of Security Incident Response ( Tokyo ) page 35: Most discussions will tend to focus on process ( "How do we do this?" ) but it helps to begin with the end in mind: "why is this needed? " to try and define the desirable outcome. FROM THERE, EXPECT TO DERIVE QUESTIONS ABOUT WHAT THE TOOLSETS (PRODUCT) WILL LOOK LIKE: WHAT DO PEOPLE SEE? HOW WILL IT BE PRESENTED? WHAT CAN MAKE PEOPLE PRODUCTIVE? Therefore the correct answer cannot be C but D.

The correct answer is C. According to the Ebook of Security Incident Response ( Tokyo ) page 35: Most discussions will tend to focus on process ( "How do we do this?" ) but it helps to begin with the end in mind: "why is this needed? " to try and define the desirable outcomes.