Exam 312-50v11 topic 1 question 88 discussion

There are several key elements to have implemented in preparation phase in order to help mitigate any potential problems that may hinder one’s ability to handle an incident. For the sake of brevity, the following should be performed: Policy – a policy provides a written set of principles, rules, or practices within an Organization. Response Plan/Strategy – after establishing organizational policies, now it is time to create a plan/strategy to handle incidents. This would include the creation of a backup plan. Communication – having a communication plan is necessary, due to the fact that it may be necessary to contact specific individuals during an incident. Documentation – it is extremely beneficial to stress that this element is particularly necessary and can be a substantial life saver when it comes to incident response. https://www.sans.org/reading-room/whitepapers/incident/incident-handlers-handbook-33901 • A. Preparation phase

pg 83 The preparation phase includes performing an audit of resources and assets to determine the purpose of security and define the rules, policies, and procedures that drive the IH&R process. It also includes building and training an incident response team, defining incident readiness procedures, and gathering required tools as well as training the employees to secure their systems and accounts. Thus A

correct