Exam CISM topic 1 question 866 discussion

Ensure/Assure = test, audit, review, etc. The closest to that should be B.

B. Testing the incident response plan

Another shit question: A. Conducting an incident capability maturity assessment - Not as beneficial as any of the others C. Establishing an incident management performance matrix - Helpful. But doesn't do much without a team D. Assembling the incident response team - Helpful. But who will be in the team, how will they react in an incident. I just wonder if a semi-trained team is better than no team at all... Answer: B. Testing the incident response plan - If by implication a team and/or matrix is in place then I assume testing it is the best.