Question 167
Main Page
A tabletop test reveals that communication roles during incident escalation are unclear. What action should follow?
A. Cancel future tests
B. Assign the role to legal by default
C. Update the IR plan with named communication responsibilities
D. Reduce test scope
Answer: Update the IR plan with named communication responsibilities
IR plans must clearly assign who communicates what, when, and how during incidents to avoid confusion.