ISC2 CISSP Practice Question

The correct answer is the definition of response time requirements for security incidents. Service-Level Agreements (SLAs) should clearly define how quickly the service provider must respond to different types of security incidents based on their severity. This is crucial because during a security incident, time is critical, and delays in response can significantly increase the impact and damage. A well-crafted SLA will categorize incidents by severity and specify different response time commitments for each level.

The other options, while they may be important in other contexts, are not as effective for protecting an organization during a security incident:

• Specifying hardware brands for the provider's infrastructure is too prescriptive and doesn't address incident response capabilities.
• Requiring the provider to hire certified professionals is important for general security posture but doesn't guarantee timely incident response.
• Mandating quarterly security assessments is valuable for ongoing security governance but doesn't help during an active security incident when immediate response is needed.