Notifying the appropriate parties to take action in order to determine the extent of the severity of an incident and
to remediate the incident’s effects is part of:

A.
Incident Evaluation

B.
Incident Recognition

C.
Incident Protection

D.
Incident Response

Explanation:
Incident Response includes notifying the appropriate parties to take action in order to determine the extent of
the severity of an incident and to remediate the incident’s effects.
Incorrect Answers:
A: Incident Evaluation is the process that would be performed by the “appropriate parties” to determine the
extent of the severity of an incident. Incident Evaluation is not the process of notifying the appropriate parties
about the incident.
B: Incident Recognition is the initial realization that an incident has occurred. After an incident is recognized, the
appropriate parties should be notified about the incident. Incident Recognition is not the process of notifying the
appropriate parties about the incident.
C: Incident Protection is not a defined incident management process.

Krutz, Ronald L. and Russell Dean Vines, The CISSP and CAP Prep Guide: Mastering CISSP and CAP, Wiley
Publishing, Indianapolis, 2007, p. 187