Which two statements are true about primary and secondary teams? (Choose two.)

In the context of security teams within an organization, primary and secondary teams have distinct functions and characteristics. Here are two statements that are true about primary and secondary teams:

Primary teams represent the cornerstone of the security teams. They are independent of one another.

• Primary teams typically focus on their specific areas of responsibility and expertise. For example, the network security team, the incident response team, and the application security team may all operate as primary teams with specific, independent functions within the overall security strategy of an organization.

Secondary teams consist of unique members and are created to address deficiencies in primary teams.

• Secondary teams often arise to address specialized needs that aren’t fully covered by the primary teams. These teams may consist of members from various primary teams or might include new personnel with specialized skills. The purpose of secondary teams is to support and enhance the capabilities of the primary teams, often focusing on cross-functional security challenges that require a collaborative approach.

The other statements have inaccuracies:

• Secondary teams are not necessarily composed of primary team personnel nor are they created simply to promote collaboration; they may have specific operational functions that complement the primary teams.
• Both primary and secondary teams might carry out tasks that are related to the organization’s security posture, but they do not always perform the same basic tasks. Their skill sets are often aligned with their specialized functions within the organization’s overall security framework.