Cisco Certified Support Technician (CCST) CybersecurityIncident HandlingEasy
An organization is developing its incident response plan. A key consideration is defining the criteria for classifying incidents by severity and impact, which will guide resource allocation and communication protocols during an active event. Which incident handling concept is being addressed by defining these criteria?
- AIncident Remediation
- BIncident Reporting
- CIncident Correlation
- DIncident Prioritization
Show answer & explanationAnswer & explanation
Correct answer: D. Incident Prioritization
Defining criteria for classifying incidents by severity and impact is central to Incident Prioritization. This process ensures that critical incidents receive the necessary attention and resources first, guiding the incident response efforts effectively.
Why the other options are wrong
- A. Remediation is the process of fixing the cause of the incident.
- B. Reporting is the act of documenting and communicating incident details.
- C. Correlation combines multiple alerts to identify a larger event.
Incident Prioritization
The process of assigning a level of importance to an incident based on its severity, impact, and criticality, to guide resource allocation and response actions.
- Uses criteria like data confidentiality, system availability, and potential financial loss.
- Ensures that high-impact incidents are addressed first.
- Critical for efficient and effective incident response.
Memory trick: Prioritize Incidents: Green for Go, Red for Stop, High for Top.