NISTNIST CSFRespond FunctionEASYFree question
What is the purpose of having escalation procedures in an incident response plan?
- A.To reduce the number of reported incidents, because anomaly detection belongs to Respond
- B.To delegate all incidents to external consultants, because response plan activation requires unanimous board approval in advance
- C.To ensure incidents are reported to the appropriate level of authority based on severity
- D.To ensure every incident is reported to the CEO immediately
Why C is correct
Escalation procedures ensure that incidents are communicated to the appropriate level of authority based on their severity, enabling timely decisions by those with the necessary authority.
Know someone studying for NIST CSF? Send them this one.