Question

An information security manager oversees an incident response program that has passed its annual tabletop exercise for the past three years. During the last exercise, the organization migrated most of its critical workloads to a new cloud service provider and adopted a new SaaS-based collaboration platform. Which factor should MOST strongly drive the manager to conduct an additional, out-of-cycle test of the incident response plan?

Accepted Answer

Significant changes to the technology environment may have invalidated existing response assumptions and procedures

Answer

The prior tabletop exercises were all completed successfully with no major findings

Answer

The annual test schedule mandated by policy has not yet arrived for the current year

Answer

The incident response team members have not rotated since the last exercise