Which action should be included in a plan element that is part of a computer security incident response capability (CSIRC)?

Last Updated: Dec 25, 2023
IT Exam Items Repository › Category: CCNA CyberOps › Which action should be included in a plan element that is part of a computer security incident response capability (CSIRC)?

Which action should be included in a plan element that is part of a computer security incident response capability (CSIRC)?

  • Detail how incidents should be handled based on the mission and functions of an organization.
  • Develop metrics for measuring the incident response capability and its effectiveness.
  • Create an organizational structure and definition of roles, responsibilities, and levels of authority.
  • Prioritize severity ratings of security incidents.

Explanation: NIST recommends creating policies, plans, and procedures for establishing and maintaining a CSIRC. A purpose of the plan element is to develop metrics for measuring the incident response capability and its effectiveness.

Related exam: CCNA Cyber Ops Chapter 13 Exam Answers
Related exam: CyberOps Associate (Version 1.0) - Module 28: Digital Forensics and Incident Analysis and Response Answers
Related exam: Cyber Threat Management - 6.6.2 Digital Forensics and Incident Analysis and Response Quiz
Related exam: Cyber Threat Management: My Knowledge Check Answers

About The Author

ITExamAnswers Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.