The incident response team has turned the evidence over to the forensic team. Now, it is the time to
begin looking for the ways to improve the incident response process for next time. What are the
typical areas for improvement?
Each correct answer represents a complete solution. Choose all that apply.

A.
Information dissemination policy

B.
Electronic monitoring statement

C.
Additional personnel security controls

D.
Incident response plan

Explanation:
and C

When the incident response team has turned the evidence over to the forensic team, it starts
looking for the ways to improve the incident response process. The typical areas for improvement
are as follows.
Incident response plan
Information dissemination policy
Incident reporting policy
Electronic monitoring statement
Audit trail policy
Additional personnel security controls
CHFI Manuals, Contents. “Incident Response”