Which response-planning decisions are identified as possible areas for internal work or professional services? Select ALL that apply.

### Why this is right - **Developing the incident response plan** is correct because professional services may assist with plan development. - **Determining backup processes** is correct because backup planning is an identified service area. - **Monitoring and patching systems** is correct because professional services may assist with both activities. ### The concept Organizations should decide which response actions and services they can conduct internally and which they will outsource. The material gives plan development, backup-process decisions, monitoring, and patching as examples of initiatives where professional services may help. Outsourcing assistance does not remove the organization's need to plan how those activities fit its requirements. ### The other options - **D. Guaranteeing that a ransom payment will restore data**: This is not an available planning service identified in the material, and payment does not guarantee restored access. ### Terms - **Professional services**: External specialist services that may assist an organization with incident response initiatives. - **Outsource**: Obtain a service from an external provider rather than conducting it entirely internally. ### Remember Decide which capabilities to perform internally and which to obtain from specialists; do not assume payment guarantees recovery.