CompTIA Security+ SY0-701 Practice Question

The correct answer is 'Playbooks.' In cybersecurity, a playbook is a guide that outlines what steps should be taken in response to a specific type of security incident. Each playbook details the procedures for detecting, containing, eradicating, and recovering from particular security threats or incidents. This procedural documentation is a critical resource in maintaining active incident response readiness. A 'Change Management Policy' relates to the process of managing alterations to IT infrastructure, but does not provide granular, scenario-specific response instruction for active incident handling. Similarly, an 'Information Security Policy' is too broad, providing general security guidelines rather than detailed incident response steps. 'Risk Analysis Documentation' usually involves a theoretical assessment of potential risk and does not offer procedural response steps.