What is defined in the SOP of a computer security incident response capability (CSIRC)?
- the procedures that are followed during an incident response
- the metrics for measuring incident response capabilities
- the details on how an incident is handled
- the roadmap for increasing incident response capabilities
| Answers Explanation & Hints:
A CSIRC will include standard operating procedures (SOPs) that are followed during an incident response. Procedures include following technical processes, filling out forms, and following checklists. |