CompTIA CySA+ CS0-003 Practice Question
You are the security officer for a mid-sized company and are developing an incident response plan (IRP). Which key element should be included in the preparation phase of your IRP?
Lessons learned
Incident response team roles and responsibilities
Developing forensic analysis procedures
Root cause analysis