A Security team wants to establish an Incident Response plan. The team has never experienced an
incident. Which of the following would BEST help them establish plans and procedures?
A.
Table top exercises
B.
Lessons learned
C.
Escalation procedures
D.
Recovery procedures
The correct answer is tabletop exercises. The team has no experience, so there are no lessons learned as yet. Escalation and Recovery procedures are important, but they are trying to establish procedures, and those are each just one area.
Tabletop exercises, on the other hand, will let them walk through each type of incident as a theoretical exercise, establishing plans and procedures as they do. Once they have gone through several incidents all the way to Lessons Learned, they will be ready to flesh out their Incident Response plan with more developed challenges, fine tuning it as they prepare for real incidents.
10
0
Agree with Brian, answer is Tabletop exercises. It simulates an emergency situation but in an informal and stress free environment.
2
0