CISM Certified Information Security Manager Study Guide

Chapter 8Incident Response

THE CERTIFIED INFORMATION SECURITY MANAGER (CISM) DOMAINS AND SUBTOPICS COVERED IN THIS CHAPTER INCLUDE:

• Domain 4: Incident Management
  • A. Incident Management Readiness
    • 4A1. Incident Response Plan
    • 4A5. Incident Classification/Categorization
    • 4A6. Incident Management Training, Testing, and Evaluation

THE CERTIFIED INFORMATION SECURITY MANAGER (CISM) SUPPORTING TASKS COVERED IN THIS CHAPTER INCLUDE:

• 29. Establish and maintain an incident response plan, in alignment with the business continuity plan and disaster recovery plan.
• 30. Establish and maintain an information security incident classification and categorization process.
• 31. Develop and implement processes to ensure the timely identification of information ...