What documentation should be gathered and reviewed for evaluating an Incident Response program?
Suggested Answer: C
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
TI
Tiera
11 months ago
I’m surprised they didn’t mention incident logs, that seems crucial!
SA
Sang
11 months ago
Results from security training assessments should be included for sure.
EM
Emerson
12 months ago
Wait, are staff interviews really that important?
CH
Chan
12 months ago
I agree, the NIST Cybersecurity Framework is essential too!
AD
Adolph
12 months ago
Definitely need to check the Policy and Procedures.
SH
Sherill
1 year ago
Results from security training assessments seem relevant too, but I wonder if they are as critical as the other options listed here.
DO
Dorathy
1 year ago
I feel like staff interviews could provide valuable insights, but I’m not confident if they are the primary documentation needed.
JU
Judy
1 year ago
I'm not entirely sure, but I remember something about the NIST Cybersecurity Framework being a key reference for incident response. Could that be option B?
HE
Hermila
1 year ago
I think we discussed the importance of policies and procedures in our last study session, so I might lean towards option C.
DE
Deonna
1 year ago
I'm a bit confused on the specifics here. Does Hong Kong have mandatory breach notification laws? If not, Zoe may have some discretion in how she handles this. I'll need to research the regulations further.
BA
Barb
1 year ago
Wait, what exactly is alternative remittance? Is that like informal money transfer networks? I'm a bit confused here.
BE
Becky
1 year ago
Isn't it possible to use OSS for database storage? It sounds familiar, but I'm not sure how much it would help with performance in this case.
SH
Shawnta
1 year ago
Hmm, this seems straightforward. I think option B is the way to go - as a Site Admin, I can import the JSON file and enable the application for the Tenant.