Question:
In whichphase of the incident management planshould the process owner define theessential information needed for identifying and classifying security incidents, while thepoint of contact and response teamconduct assessments and determine actions?
Submit