CompTIA Advanced Security Practitioner (CASP) Question 13

Due to a recent breach, the Chief Executive Officer (CEO) has requested the following activities be conducted during incident response planning:

– Involve business owners and stakeholders
– Create an applicable scenario
– Conduct a biannual verbal review of the incident response plan
– Report on the lessons learned and gaps identified

Which of the following exercises has the CEO requested?

A. Parallel operations
B. Full transition
C. Internal review
D. Tabletop
E. Partial simulation

Correct Answer: C