Exam CISA topic 1 question 870 discussion

Incident management begins with the detection of events that affect user availability. If detection is ineffective, there is a risk that incidents will go undetected.

In summary, ineffective incident detection (Option D) is typically the greatest concern for an IS auditor in the context of incident management because it forms the foundation upon which all other incident management activities rely.

When an IS (Information Systems) auditor is reviewing an organization's incident management processes and procedures, the auditor's GREATEST concern should typically be related to matters that directly impact the organization's ability to respond to and mitigate security incidents effectively. In this context, the GREATEST concern would typically be: C. Ineffective incident prioritization Effective incident prioritization is crucial in incident management. It involves assessing the severity and potential impact of incidents and determining which ones require immediate attention and which can be addressed later. If an organization has ineffective incident prioritization, it means they might not be able to allocate resources appropriately, respond to critical incidents in a timely manner, or efficiently manage their incident response efforts. This could result in significant security breaches or prolonged downtime.

d is answer.

A: Ineffective incident Classification (To classify incident impact and urgency come first.)

D is better

D is the correct answer

I go with D as it means we dont detect all inidents thatcreally occure