ISC2 Certified in Cybersecurity (CC) Practice Question

An incident response (IR) plan exists to guide coordinated actions that immediately address a security event. Its chief aim is to minimize the damage an incident causes-such as data loss, service disruption, and reputational harm-and to speed restoration of normal operations. While vulnerability management, regulatory compliance, and alternate facility planning are important security or continuity activities, they are handled by separate processes (secure development, governance/risk/compliance, and disaster recovery/business continuity respectively).