Organizations establish and follow an incident management framework to respond to cyber attacks. Oftentimes, one of the phases to manage incident response is called Reflection. What is it?

Question

Answer

The phase when the organization has resolved the incident and needs to move back to standard operations, such as by removing temporary fixes and restoring services.

Answer

The phase when the organization plans what it should do in the event of an incident, such as preparing resources and testing procedures.

Answer

The phase when the organization observes the attack and the priority is to prevent the incident from worsening.

Answer

The phase after the incident when it is important for the organization to review not only what caused the incident, but how effective the response was.

Crowdly

Organizations establish and follow an incident management framework to respond t...

Want instant access to all verified answers on moodle.epitest.eu?