During a tabletop exercise, a team discovers that the communication plan is missing a key contact for legal consultation. What should be the immediate next step to improve the incident response plan?
Update the incident response plan to include the missing contact information
The correct answer is to update the incident response plan to include the missing contact information. Tabletop exercises are designed to identify gaps and deficiencies in the plan so they can be addressed. The objective is to ensure that all necessary contacts and steps are clearly documented for efficient incident handling. Documenting lessons learned without updating the plan will not solve the immediate gap. Creating a new communication plan is excessive if only a minor adjustment is needed, and proceeding with the escalation process without addressing the gap will leave the team vulnerable.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
Why is it important to update the incident response plan after a tabletop exercise?
Open an interactive chat with Bash
What is a tabletop exercise in the context of incident response?
Open an interactive chat with Bash
What should be included in an incident response plan's communication plan?