CompTIA CySA+ CS0-003 Practice Question
You are the security officer for a mid-sized company and are developing an incident response plan (IRP). Which key element should be included in the preparation phase of your IRP?
Developing forensic analysis procedures
Incident response team roles and responsibilities
Root cause analysis
Lessons learned