(ISC)2 Certified in Cybersecurity Practice Exam

What provides structure during cybersecurity incidents?

1. Security Policies

2. Incident Response Plan

3. Disaster Recovery Plan

4. Business Continuity Plan

The correct answer is: Incident Response Plan

An Incident Response Plan is crucial during cybersecurity incidents because it provides a clear and structured framework that guides the organization through the necessary steps to effectively respond to and recover from an incident. This plan details roles and responsibilities, communication strategies, and the specific procedures to follow when an incident occurs. When a cybersecurity incident happens, having a well-defined Incident Response Plan ensures that responses are timely and organized, minimizing potential damage and facilitating a quicker recovery. It also helps in ensuring that team members know what to do and who to communicate with, thus reducing confusion in an already stressful situation. While security policies set the overall security objectives and guidelines for the organization and disaster recovery plans focus on restoring critical functions after a critical failure, the Incident Response Plan specifically addresses the immediate actions required in response to an active incident. Similarly, a business continuity plan outlines how to maintain operations during and after disruptive events but does not focus solely on the specifics of responding to cybersecurity incidents.