Exam CISM topic 1 question 464 discussion

The chief goals of an incident response team are to detect and respond to security events and minimize their business impact.

A. To provide a single point of contact for critical incidents

The Correct Answer is (D) to provide effective incident mitigation. Rationale: A. To provide a single point of contact for critical incidents is incorrect cause that role would fall on someone with an authority to make decisions. The IR team simply carries out those decisions and provides the information to the point of contact to make those decisions. B. To provide a risk assessment for zero-day vulnerabilities is incorrect because this is done by: Risk managers, Security professionals, IT professionals, Subject matter experts C. To provide a business impact analysis (BIA) incorrect cause BIA is done by BCP pros, info pros, risk management and SME of business units. Not by the IR team.

D is correct

response team provide a contact.