CompTIA Security+ SY0-701 Practice Question
Which activity is MOST critical for an organization to perform when establishing an incident response capability to ensure effectiveness during security incidents?
Developing and documenting the incident response policy
Holding a retrospective meeting to discuss incident handling
Conducting regular employee background checks
Distributing the employee security handbook