Which of the following actions would be recommended to improve an incident response process?

Which of the following actions would be recommended to improve an incident response process?
A . Train the team to identify the difference between events and incidents
B. Modify access so the IT team has full access to the compromised assets
C. Contact the authorities if a cybercrime is suspected
D. Restrict communication surrounding the response to the IT team

View Answer

Answer: A