Which of the following best describes the preparation phase of the NIST incident response process?
A) Follows a predefined process while documenting each step the analyst takes
B) Includes deploying the necessary tools and resources to successfully investigate and resolve cybersecurity incidents
C) Includes how to use collected incident data and evidence retention
D) Includes choosing a containment strategy to effectively contain and eradicate the attack, as well as to successfully recover from it

Question

Quizplus · Accepted Answer

The preparation phase in the NIST incident response process involves setting up the necessary tools, policies, and procedures to effectively respond to and manage cybersecurity incidents. This includes deploying the necessary tools and resources to investigate and resolve incidents.

Which of the Following Best Describes the Preparation Phase of the NIST