Giving the incident response team the responsibility for patch management (for example,acquiring,testing,and distributing patches to the appropriate administrators and users throughout the organization)is generally not recommended.

Question

Quizplus · Accepted Answer

Incident response teams typically have a focus on identifying and responding to security incidents rather than routine maintenance tasks like patch management. Patch management is typically the responsibility of system administrators or a dedicated team with expertise in this area.

Giving the Incident Response Team the Responsibility for Patch Management