Cybersecurity and Response Planningintermediate
A response team has a plan but has never practiced it. Explain why testing, drills, and learning from past incidents should still be part of its readiness work.
Answer
A written plan alone does not show whether team members can coordinate and perform their responsibilities. Testing and drills allow the team to practice and assess its response. Learning from past incidents helps the organization identify lessons and improve future preparation. These activities complement the plan, audits, assessments, threat intelligence, and cross-departmental coordination.
Explanation
### The concept
An incident response plan provides guidance, but teams also need ways to examine and practice their preparation. Testing and drills give members a chance to work through response activities. Learning from past incidents allows the organization to use experience when improving its approach. These strategies complement audits and assessments, threat intelligence gathering, and coordination across departments.
### What a good answer covers
- A plan does not itself demonstrate practiced coordination.
- Drills let team members exercise their responsibilities.
- Testing helps assess readiness.
- Lessons from earlier incidents can inform future preparation.
### Terms
- **Readiness**: the state of being prepared to respond.
- **Cross-departmental coordination**: cooperation among different organizational departments.
### Remember
A plan should be supported by practice, assessment, and learning.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free