CISM Certified Information Security Manager Practice Exams, Second Edition, 2nd Edition

CHAPTER 7

Incident Management Readiness

This domain includes questions from the following topics:

•  Similarities and differences between security incident response, business continuity planning, and disaster recovery planning

•  Performing a business impact analysis and criticality analysis

•  Developing business continuity and disaster recovery plans

•  Classifying incidents

•  Testing response plans and training personnel

This chapter covers Certified Information Security Manager (CISM) Domain 4, “Incident Management,” part A, “Incident Management Readiness.” The entire Incident Management domain represents 30 percent of the CISM examination.

Supporting Tasks in the CISM job practice that align with the Incident Management / Incident Management ...