Guys, does this mean "senior management support/buy-in" is the magic "catch-all, always correct" answer on CISM exam? I don't think so. Hence going with C.

If assets are not classified than senior management support is ineffective.

C for me. Management has nothing to do with it at that point. He/She already approved the security strategy

C. Classification scheme.....proper incident classification is crucial for an effective Incident response. A high risk incident will have to be treated differently from a low risk incident etc.

D. Senior management support

by classify will ensure effective communication to resolve the issue as soon as possible

Senior management must be committed to incident response in order for it to be successful. They must provide the resources and authority necessary to develop and implement an effective incident response plan.

The "golden rule" of CISM (management support/buy-in) applies here.

senior management support for strategy etc. for incident response - Identification and Classification is everything for appropriate response.

D. Senior management support is essential to ensuring effective incident response. While the other options may also be important in different contexts, having the support and involvement of senior management is crucial in order to allocate resources, establish policies and procedures, and empower the incident response team to take appropriate actions. Without senior management support, it can be difficult to implement an effective incident response plan and address security incidents in a timely and efficient manner.

C. Classification scheme , Management support wont do anything during incident response unless escalation happens

Stuck between C and D. But considering how a dumb management can bring the best of castles crumbling to the ground, D.

D. Senior management support Effective incident response requires support and commitment from senior management. They play a crucial role in allocating resources, setting priorities, and ensuring that the incident response plan is integrated into the organization's overall strategy. Without senior management support, it can be challenging to implement and execute an effective incident response plan, even if you have other elements like a business continuity plan, cost-benefit analysis, or a classification scheme in place.

I am wondering whether C is not correct. You need to have a defined classification on incidents to know how to respond to them. I am between C and D.

Bcp? Could be??