NISTNIST CSFRespond FunctionEASYFree question
What is the purpose of having escalation procedures in an incident response plan?
- A.To reduce the total number of incidents that ever get formally reported to leadership
- B.To delegate incidents to outside consultants whose activation requires unanimous board approval in advance
- C.To ensure incidents are reported to the appropriate level of authority based on severity
- D.To ensure each incident is reported directly to the CEO within minutes regardless of its actual severity or impact
Why C is correct
Escalation procedures ensure that incidents are communicated to the appropriate level of authority based on their severity, enabling timely decisions by those with the necessary authority.
Know someone studying for NIST CSF? Send them this one.