Which of the following is MOST important for an IS auditor to review when evaluating the effectiveness of an organization’s incident response process?
A . Past incident response actions
B . Incident response staff experience and qualifications
C . Results from management testing of incident response procedures
D . Incident response roles and responsibilities
Answer: C