Why should an organization decide in advance which incident response capabilities it will provide internally and which it will obtain from professional services?
Answer
Advance decisions clarify available skills, authority, and support arrangements, reducing delays when an incident occurs. They also help the organization identify capability gaps and prepare coordination with external providers.
Explanation
### What a good answer covers
- Internal and external capability choices determine who can perform response tasks.
- Planning identifies skill or resource gaps before an incident creates time pressure.
- External providers need clear engagement and communication arrangements.
- Responsibility and authority should remain clear even when services are outsourced.
### Remember
Know who will do each response task before the organization needs it.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free