Câu 254: Isaca Certified Information Security Manager

Which of the following should be an information security manager's MOST important criterion for determining when to review the incident response plan?

1. A. When recovery time objectives (RTOs) are not met
2. B. When missing information impacts recovery from an incident — đáp án hiện tại
3. C. Before an internal audit of the incident response process
4. D. At intervals indicated by industry best practice