ISC2 Certified in Cybersecurity (CC)Business Continuity (BC), Disaster Recovery (DR) & Incident Response (IR) ConceptsMedium
A financial institution is implementing a new business continuity plan. As part of this, they are defining the systematic process for identifying, analyzing, and responding to security incidents. This process is formally known as:
- AIncident Management
- BDisaster Recovery Planning (DRP)
- CBusiness Impact Analysis (BIA)
- DRisk Assessment
Show answer & explanationAnswer & explanation
Correct answer: A. Incident Management
Incident management is the overarching process that encompasses the identification, analysis, containment, eradication, recovery, and post-incident activities related to security incidents. It provides a structured approach to handling such events.
Why the other options are wrong
- B. DRP focuses on restoring IT operations after a disaster, not the full spectrum of incident response.
- C. BIA identifies critical business functions and their impact, not the process for responding to incidents.
- D. Risk assessment identifies and evaluates potential threats and vulnerabilities, rather than the response process itself.
Incident Management
The process of identifying, analyzing, prioritizing, and resolving security incidents to restore normal service operations as quickly as possible and prevent future occurrences.
- Encompasses detection, containment, eradication, recovery, and post-incident activities.
- Aims to minimize the impact of security incidents.
- Requires a well-defined incident response plan.
Memory trick: Management is the 'big picture' of handling all incidents.