Question

According to Luttgens, which of the following is not a goal of activities performed during incidence response?

Confirm whether or not an incident occurred

Minimize the damage to the compromised organization

Identify Information Security team member responsible for the incident occurrence

Manage the public perception of the incident

Determine and document the scope of the incident

Answer 1

The activity which is not the goal of activity performed during the incident response as mentioned in the approach is

Identify Information Security team member responsible for the incident occurrence

For better understanding, all activities covered under the model are as follow:

Incident response may include activities that:

• Confirm whether or not an incident occurred
• Provide rapid detection and containment
• Determine and document the scope of the incident
• Prevent a disjointed, noncohesive response
• Determine and promote facts and actual information
• Minimize disruption to business and network operations
• Minimize the damage to the compromised organization
• Restore normal operations
• Manage the public perception of the incident
• Allow for criminal or civil actions against perpetrators
• Educate senior management
• Enhance the security posture of a compromised entity against future incidents

Thus, considering the above, the activity of "Identify Information Security team member responsible for the incident occurrence" is not part of this approach