Câu 31: Lead Implementer: PECB Certified ISO/IEC 27001 Lead Implementer

The incident management process of an organization enables them to prepare for and respond to information security incidents. In addition, the organization has procedures in place for assessing information security events. According to ISO/IEC 27001, what else must an incident management process include?

1. A. Processes for using knowledge gained from information security incidents — đáp án hiện tại
2. B. Establishment of two information security incident response teams
3. C. Processes for handling information security incidents of suppliers as defined in their agreements