Exam CISM topic 1 question 1005 discussion

Option C: Updating the information security incident response manual when creating an action plan to improve service desk readiness. While all the options mentioned are important, updating the information security incident response manual is crucial in this scenario. The manual serves as a guide for the service desk team on how to respond effectively in the event of a security incident such as a ransomware attack. By updating the manual, the team can ensure that they have the most up-to-date and relevant procedures, techniques, and best practices to follow during such incidents.

C. Updating the information security incident response manual

Having a robust data backup system is crucial in the event of a ransomware attack. Regularly backing up important data and ensuring the backups are secure and up-to-date can enable an organization to recover its systems and files without paying the ransom. This approach not only mitigates the impact of a ransomware attack but also prevents the loss of critical data.

Since the context is "creating an action plan to improve service desk readiness", I'll go with C. If it were improving response/recovery to ransomware attacks, I'd have gone with D.