After a significant security breach, your organization is evaluating its incident response actions. As part of a lessons learned meeting, your team is discussing improvements to the preparation phase of the incident response plan to enhance future responses. What is the MOST valuable addition to this phase to ensure more effective handling of similar incidents?
Increasing the frequency of backup operations.
Purchasing more advanced intrusion detection systems.
Conducting regular Tabletop exercises.
Regularly revising the disaster recovery plan.
|Incident Response and Management
|Reporting and Communication