In cybersecurity governance, the foundational document approved by executive leadership that formally defines organizational authority, roles, and high-level requirements for incident handling is known as the incident response _____.

### Why this is right The policy establishes the authority, roles, and responsibilities for incident response. The material specifies that senior management and executives should approve it. ### The concept An incident response policy is a governance document: it gives the response process organizational direction and defines who is responsible for key actions. Senior approval helps ensure that responders have recognized authority and that the policy aligns with organizational requirements. The policy is distinct from detailed procedures, which explain how the response work is performed. ### Terms - **Incident response policy**: An approved statement of authority, roles, and responsibilities for incident response. - **Senior management**: Organizational leaders who have authority to approve policies and assign responsibilities. ### Remember The policy should have formal leadership approval before it is treated as authoritative.