(ISC)2 Certified in Cybersecurity Practice Exam

What describes the policies and procedures governing cybersecurity incidents?

1. Incident Management Framework

2. Incident Response Guidelines

3. Incident Response Plans

4. Security Control Measures

The correct answer is: Incident Response Plans

The term that describes the policies and procedures governing cybersecurity incidents is most accurately represented by Incident Response Plans. These plans outline a structured approach that an organization should follow when responding to cybersecurity incidents. They are comprehensive documents that serve as a playbook for the organization, detailing the steps to be taken before, during, and after an incident to effectively manage and mitigate the impact of cybersecurity threats. Incident Response Plans include various components such as roles and responsibilities, communication protocols, incident classification and prioritization, technical procedures for detection and analysis, and recovery processes. This structured approach ensures that the organization is prepared to address incidents efficiently and with minimal disruption to operations. While the other options are related to managing cybersecurity incidents, they generally serve different purposes. An Incident Management Framework provides a broader framework for managing all aspects of incidents, which includes both response and recovery but does not specifically detail the procedures. Incident Response Guidelines are more like best practices or advisories that inform how to respond to incidents but do not provide the comprehensive, formalized structure of a plan. Security Control Measures refer to proactive steps taken to protect systems and data, rather than governing the response to incidents that have already occurred.