Certified Information Security Manager (CISM)Incident ManagementEasy
A CISO is developing an incident response plan for a rapidly growing startup with limited resources. The CISO needs to ensure the plan focuses on quick containment and recovery for the most critical assets, without investing heavily in complex forensic tools or extensive long-term analysis capabilities initially. Which incident response strategy BEST aligns with this approach?
- ACompliance-focused incident response.
- BLean incident response.
- CForensic-driven incident response.
- DComprehensive incident response.
Show answer & explanationAnswer & explanation
Correct answer: B. Lean incident response.
Lean incident response focuses on efficient, resource-optimized processes for containment and recovery of critical assets, prioritizing speed and practicality over extensive forensic detail, which is ideal for organizations with limited resources.
Why the other options are wrong
- A. While compliance is important, a compliance-focused approach doesn't inherently prioritize quick, resource-efficient containment and recovery over other aspects.
- C. This approach emphasizes deep forensic analysis, which is resource-intensive and not suitable for limited resources and quick recovery.
- D. Comprehensive incident response involves extensive planning, tools, and analysis, which is resource-heavy.
Lean Incident Response
An incident response methodology that emphasizes efficiency, speed, and resource optimization, focusing on rapid containment and recovery of critical assets with minimal overhead.
- Prioritizes critical assets.
- Optimizes use of limited resources.
- Focuses on quick containment and recovery.
Memory trick: When you're 'lean' and mean, you focus on 'quick wins' with what you've got.