A security team wants to establish an Incident Response plan. The team has never experienced an incident.
Which of the following would BEST help them establish plans and procedures?
A.
Table top exercises
B.
Lessons learned
C.
Escalation procedures
D.
Recovery procedures
I believe A is the correct answer.
I agree with Wes.
Tabletop exercises are discussion-based sessions where team members meet in an informal, classroom setting to discuss their roles during an emergency and their responses to a particular emergency situation. A facilitator guides participants through a discussion of one or more scenarios. A is the correct answer
how about lesson learned?? since the team never experienced an incident, they should base off some historical data to establish an incident response plan.